Skip to content
OpenAdvisories
High WID-SEC-2026-4345 6 CVEs

Red Hat Enterprise Linux (tesseract): Mehrere Schwachstellen

Published Nov 4, 2026 · Updated Nov 12, 2026 · Revision 5 · de

Vendor: Oracle Vendor: Red Hat Vendor: RESF Product: Enterprise Linux Product: Linux Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 6

  • High 8.6
    CVE-2026-88047

    Tesseract: ReadNormProtos stack buffer overflow

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whitespace-delimited token…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88048

    Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the weight-matrix dimensions. During FullyConnected::Forward,…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88049

    Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::Ad…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88051

    Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and size_used_ from a .traineddata model without a cap or an invariant che…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 8.6
    CVE-2026-88053

    Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted .traineddata file and uses those…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  • High 7.8
    CVE-2026-88052

    Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unichar_insert_backward…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu

Revision history

  1. #5

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  2. #4

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

  3. #3

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  4. #2

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  5. #1

    Initiale Fassung

References