CVE-2026-73067mediumCWE-125

CVE-2026-73067: fallo de gravedad media en tesseract-ocr tesseract

Tesseract: Heap OOB read in the DAWG loader

Publicada el

Seguir esta CVE+ Monitorear tesseract+ Monitorear tesseract

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.7epss 0.1%
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
tesseract-ocr · tesseract
CVEs relacionadas — tesseract-ocr tesseract

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-119341NONETesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructorEPSS 0.3%CVE-2026-88052HIGHTesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronizationEPSS 0.2%CVE-2026-88053HIGHTesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddataEPSS 0.2%CVE-2026-88048HIGHTesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatchEPSS 0.2%CVE-2026-88051HIGHTesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fieldsEPSS 0.2%CVE-2026-119339MEDIUMTesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of ServiceEPSS 0.2%