Known Vulnerabilities for products from Tesseract-ocr
Listed below are 11 of the newest known vulnerabilities associated with the vendor "Tesseract-ocr".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88054 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects ... | Not Provided | 2026-09-10 | 2026-09-16 |
| CVE-2026-88053 json | Not Provided | 2026-09-10 | 2026-09-11 | |
| CVE-2026-88052 json | Not Provided | 2026-09-10 | 2026-09-11 | |
| CVE-2026-88051 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/... | Not Provided | 2026-09-10 | 2026-09-16 |
| CVE-2026-88050 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompres... | Not Provided | 2026-09-10 | 2026-09-14 |
| CVE-2026-88049 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to Net... | Not Provided | 2026-09-10 | 2026-09-14 |
| CVE-2026-88048 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.... | Not Provided | 2026-09-10 | 2026-09-14 |
| CVE-2026-88047 json | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp ... | Not Provided | 2026-09-10 | 2026-09-14 |
| CVE-2026-73067 json | Not Provided | 2026-08-11 | 2026-08-11 | |
| CVE-2026-73066 json | Not Provided | 2026-08-11 | 2026-08-11 | |
| CVE-2022-38266 json | An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of S... | Not Provided | 2022-09-09 | 2026-09-14 |
| CVE-2021-36081 json | Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. | Not Provided | 2021-07-01 | 2026-09-14 |
| CVE-2011-1136 json | In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the use... | Not Provided | 2019-11-14 | 2026-09-14 |