Vulnerabilities in tesseract-ocr
10 resultsVexday analysis
O Tesseract-OCR apresenta 2 vulnerabilidades catalogadas, ambas publicadas recentemente (últimos 90 dias), sem registros de exploração ativa em campo. A fraqueza predominante é leitura fora dos limites (CWE-125), típica de processadores de dados, e nenhuma é classificada como crítica. O risco atual é contido, mas requer monitoramento dado o padrão recente de divulgações.
CVE-2026-88050MEDIUMTesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code valuesEPSS 0.1%CVE-2026-88049HIGHTesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatchEPSS 0.1%CVE-2026-88054MEDIUMTesseract: Denial of service via empty-stack dereference in Plumbing/Series at model loadEPSS 0.1%CVE-2026-73066MEDIUMTesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddataEPSS 0.1%CVE-2026-73067MEDIUMTesseract: Heap OOB read in the DAWG loaderEPSS 0.1%CVE-2026-88052HIGHTesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronizationEPSS 0.1%CVE-2026-88051HIGHTesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fieldsEPSS 0.1%CVE-2026-88053HIGHTesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddataEPSS 0.1%CVE-2026-88047HIGHTesseract: ReadNormProtos stack buffer overflowEPSS 0.1%CVE-2026-88048HIGHTesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatchEPSS 0.1%