CVE-2026-73067

EUVD-2026-56182

11.08.2026, 15:17

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.7 MEDIUM	LOCAL	LOW	NONE	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 2.35%

Debian Releases

Debian Product

Codename

tesseract

bookworm	postponed
forky	vulnerable
sid	vulnerable
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

tesseract

bionic	Fixed 4.00~git2288-10f4998a-2ubuntu0.1~esm1 released
focal	Fixed 4.1.1-2ubuntu0.1~esm1 released
jammy	Fixed 4.1.1-2.1ubuntu0.1~esm1 released
noble	Fixed 5.3.4-1ubuntu0.1~esm1 released
resolute	Fixed 5.5.0-1ubuntu0.1~esm1 released
trusty	ignored
xenial	ignored

Common Weakness Enumeration

CWE-125 - Out-of-bounds Read
The software reads data past the end, or before the beginning, of the intended buffer.

References

https://github.com/tesseract-ocr/tesseract/commit/55287a94b8044c05ce3fd10f5aca6ebbd238e518

https://github.com/tesseract-ocr/tesseract/commit/82727cc11c34eaf1249af002d69f6bbae70993b9

https://github.com/tesseract-ocr/tesseract/issues/4580

https://github.com/tesseract-ocr/tesseract/pull/4581

https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.3

https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-x3vq-7rr7-5x3h