Product by Tesseract-ocr
Tesseract
14 known vulnerabilities in Tesseract (Tesseract-ocr), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-88051 | Tesseract: Out-of-bounds Write | 7.8 | |
| High | CVE-2026-88053 | Tesseract: Out-of-bounds Write | 7.8 | |
| High | CVE-2026-88048 | Tesseract: Out-of-bounds Read | 7.1 | |
| High | CVE-2026-88049 | Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch | 5.5 | |
| High | CVE-2026-88047 | Tesseract: ReadNormProtos stack buffer overflow | 7.8 | |
| Medium | CVE-2026-119338 | Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages | — | |
| High | CVE-2026-88052 | Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization | 7.8 | |
| Medium | CVE-2026-88054 | Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load | 5.5 | |
| Medium | CVE-2026-88050 | Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values | 5.5 | |
| Medium | CVE-2026-119339 | Tesseract: Reachable Assertion | 5.5 | |
| Medium | CVE-2026-119340 | Tesseract: Integer Overflow or Wraparound | 5.5 | |
| Medium | CVE-2026-73066 | Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata | — | |
| Medium | CVE-2026-73067 | Tesseract: Heap OOB read in the DAWG loader | — | |
| Not rated | CVE-2026-119341 | Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor | — |