Tesseract-ocr vulnerabilities
We track 5 vulnerabilities in Tesseract-ocr products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
Latest Tesseract-ocr vulnerabilities
- 7.8 High severity
tesseract: Out-of-bounds Write
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted .traineddata file and uses those
- 7.8 High severity
tesseract: Improper Validation of Array Index
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unichar_insert_backwards
- 7.8 High severity
tesseract: Out-of-bounds Write
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and size_used_ from a .traineddata model without a cap or an invariant chec
- 7.1 High severity
tesseract: Out-of-bounds Read
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the weight-matrix dimensions. During FullyConnected::Forward,
- 7.8 High severity
tesseract: Stack-based Buffer Overflow
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whitespace-delimited token