Most recent entries from all

ALSA-2026:67831 — Important: tesseract security update

Affected: AlmaLinux:9: tesseract, AlmaLinux:9: tesseract-devel

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.

Security Fix(es):

* tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-351152

fkie_cve-2026-73066

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.

OESA-2026-3569 — tesseract security update

Affected: openEuler:24.03-LTS-SP4: tesseract

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es):

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.(CVE-2026-73067)

RHSA-2026:67830 — Red Hat Security Advisory: tesseract security update

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

RHSA-2026:69111 — Red Hat Security Advisory: tesseract security update

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

RLSA-2026:67830 — Important: tesseract security update

Affected: Rocky Linux:10: tesseract

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.

Security Fix(es):

* tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata (CVE-2026-73066)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-73066

Affected: Ubuntu:14.04:LTS: tesseract, Ubuntu:16.04:LTS: tesseract, Ubuntu:18.04:LTS: tesseract, Ubuntu:20.04:LTS: tesseract, Ubuntu:22.04:LTS: tesseract, Ubuntu:24.04:LTS: tesseract, Ubuntu:26.04:LTS: tesseract

WID-SEC-W-2026-3382 — Red Hat Enterprise Linux (firewalld, leapp-repository, tesseract): Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, einschließlich der Ausführung von Code mit Root-Rechten, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.