Skip to content
OpenAdvisories
High RHSA-2026:98514 6 CVEs

Red Hat Security Advisory: tesseract security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream tesseract 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::appstream tesseract-debuginfo 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::appstream tesseract-debugsource 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::appstream tesseract-tools-debuginfo 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::crb tesseract-debuginfo 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::crb tesseract-debugsource 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::crb tesseract-devel 0:4.1.1-11.el9_9
Red Hat · RHEL 9 enterprise_linux:9::crb tesseract-tools-debuginfo 0:4.1.1-11.el9_9

Vulnerabilities 6

  • High 8.6
    CVE-2026-88047

    Tesseract: ReadNormProtos stack buffer overflow

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whitespace-delimited token…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88048

    Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the weight-matrix dimensions. During FullyConnected::Forward,…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88049

    Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::Ad…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88051

    Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and size_used_ from a .traineddata model without a cap or an invariant che…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88053

    Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted .traineddata file and uses those…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 7.8
    CVE-2026-88052

    Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unichar_insert_backward…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531546
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531554
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531566
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531579
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98514.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-88047
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88047
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88047
  • article
    https://github.com/tesseract-ocr/tesseract/commit/1bda5079b1c8a7e25f523486837426903d29ce84
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-5j2p-r5vc-q7f3
  • report
    https://access.redhat.com/security/cve/CVE-2026-88048
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88048
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88048
  • article
    https://github.com/tesseract-ocr/tesseract/commit/103dc134eb36411ddc6833ec20aa2c76795bd0ff
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-q44c-23p6-5mw6
  • report
    https://access.redhat.com/security/cve/CVE-2026-88049
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88049
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88049
  • article
    https://github.com/tesseract-ocr/tesseract/commit/b494ac18925f9d9aff9ef5815475de9943ab19bf
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-jgq8-pprg-vc68
  • report
    https://access.redhat.com/security/cve/CVE-2026-88051
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88051
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88051
  • article
    https://github.com/tesseract-ocr/tesseract/commit/56e09ca12e751623fe796ce1554ce704bffd2ef0
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-88qp-4g94-3rf3
  • report
    https://access.redhat.com/security/cve/CVE-2026-88052
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88052
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88052
  • article
    https://github.com/tesseract-ocr/tesseract/commit/2d04d640db2e8c7e3bab2369d599343b5a8b8443
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-2hm8-q5c7-c373
  • report
    https://access.redhat.com/security/cve/CVE-2026-88053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88053
  • article
    https://github.com/tesseract-ocr/tesseract/commit/8b0574680f3b22f246ade6a4c8e3029104255c63
  • article
    https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-rphx-x795-5qjv