Live › vulnerability › CVE-2026-119340
Tesseract, an open source OCR engine, fails to validate matrix dimensions when loading a traineddata file, so negative or oversized values lead to inconsistent allocation and out-of-bounds access. An attacker who supplies a crafted traineddata file can cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 21:25 UTC. All times on this page are UTC.
Teams that load traineddata language files into Tesseract, especially files from untrusted sources, are exposed on versions before 5.5.4. Systems that only use trusted, bundled language data are lower risk. The sources do not say which downstream packages bundle Tesseract.
No product ranges from the sources yet.
tesseract --version to see which Tesseract version is installed.5.5.4 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with UINT16_MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535 product can create inconsistent allocation state and later out-of-bounds accesses while loading a crafted traineddata file, causing denial of service. This issue is fixed in version 5.5.4.
This page as .md · .json · in your agent: get_signal("CVE-2026-119340")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.