{"id":"CVE-2026-119339","kind":"vulnerability","aliases":["CVE-2026-119339"],"related":[],"title":"Tesseract OCR: crafted model file crashes the process via denial of service","description":"Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST_FLOAT builds, DeSerializeOld invokes ASSERT_HOST instead of returning an error, so loading a crafted model through TessBaseAPI::Init terminates the process and causes denial of service. This issue is fixed in version 5.5.4.","summary":"Tesseract is an open source OCR engine. A crafted traineddata model loaded through TessBaseAPI::Init triggers an assertion in default builds that terminates the process, causing a denial of service.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","ocr","package","tesseract"],"not_affected_if":["pre-5.5.4-not-used","trusted-models-only"],"how_to_check":"- Check the installed Tesseract version with `tesseract --version`, and check any bundled or vendored copy in your application dependencies.\n- Look for code paths that load traineddata models from untrusted sources through TessBaseAPI::Init.","fix":"- Move to `5.5.4` or later.","status":"open","published_at":"2026-10-30T21:16:51+00:00","first_seen_at":"2026-10-30T21:25:52+00:00","triaged_at":"2026-10-30T21:26:55+00:00","updated_at":"2026-10-30T21:26:55+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-30T21:26:55Z","model":"claude-haiku-5-5","output":{"fix":"- Move to `5.5.4` or later.","reach":"unknown","title":"Tesseract OCR: crafted model file crashes the process via denial of service","impact":"low","summary":"Tesseract is an open source OCR engine. A crafted traineddata model loaded through TessBaseAPI::Init triggers an assertion in default builds that terminates the process, causing a denial of service.","audience":"developers","category":"package","nicknames":[],"who_cares":["tesseract","ocr","c++"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"Process crashes, causing denial of service for the OCR service","analyst_note":"","how_to_check":"- Check the installed Tesseract version with `tesseract --version`, and check any bundled or vendored copy in your application dependencies.\n- Look for code paths that load traineddata models from untrusted sources through TessBaseAPI::Init.","plain_action":"","needs_analyst":false,"not_affected_if":["trusted-models-only","pre-5.5.4-not-used"],"who_is_affected":"Applications that embed Tesseract and load traineddata language models supplied from outside the team, such as user uploads or downloaded models, are exposed. Systems that only load the models bundled with a trusted installation are less exposed. The sources do not say whether any particular distribution or package manager has shipped the fix.","user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000674,"input_tokens":4184,"output_tokens":511,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119339':15A,18A '-2026':14A,17A '5.5.4':62C,118C 'assert':40B,89C 'build':43B,86C 'byte':68C 'c':19B 'call':75C 'caus':48B,108C 'clear':81C 'craft':3A,31B,99C 'crash':6A 'cve':13A,16A 'default':42B,83C 'denial':10A,50B,109C 'deseri':64C 'deserializeold':77C,87C 'engin':29B,59C 'error':95C 'fast':84C 'file':5A 'fix':115C 'float':85C 'host':90C 'init':37B,103C 'instead':91C 'invok':88C 'issu':113C 'kdoubleflag':79C 'load':34B,97C 'lstm':72C 'mode':67C 'model':4A,33B,100C 'network':73C 'ocr':2A,20B,28B,58C 'open':26B,56C 'packag':21B 'prior':60C 'process':8A,47B,106C 'return':93C 'servic':12A,52B,111C 'sourc':27B,57C 'termin':45B,104C 'tessbaseapi':36B,102C 'tesseract':1A,22B,23B,53C 'traineddata':32B,71C 'trigger':38B 'trust':65C 'version':117C 'via':9A 'weightmatrix':63C,76C","nicknames":[],"mitigations":[],"who_affected":"Applications that embed Tesseract and load traineddata language models supplied from outside the team, such as user uploads or downloaded models, are exposed. Systems that only load the models bundled with a trusted installation are less exposed. The sources do not say whether any particular distribution or package manager has shipped the fix.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T21:16:51+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119339","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119339","severity":null,"published_at":"2026-10-30T21:16:51+00:00","modified_at":"2026-10-30T21:16:51+00:00","first_seen_at":"2026-10-30T21:25:52+00:00","fetched_at":"2026-10-30T21:25:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}