Skip to content
OpenAdvisories
High openSUSE-RU-2026:22002-1 1 CVE

Recommended update for tesseract-ocr

Published Sep 29, 2026 · Updated Oct 1, 2026

Ecosystem: openSUSE

Summary

This update for tesseract-ocr fixes the following issues:

Changes in tesseract-ocr:

- Update tesseract-CVE-2026-88053.patch to null the adaptive
template pointer arrays again and the class pruners as
upstream does, fixing an abort at exit on every run and
invalid frees when a corrupt traineddata is rejected
(boo#1282863)

Fixed packages 1

ReleasePackageFixed in
openSUSE · Leap 16.0 tesseract-ocr 5.5.3-bp160.2.1

Vulnerabilities 1

  • High 8.6
    CVE-2026-88053

    Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

    Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted .traineddata file and uses those…

    tesseract-ocr tesseract tesseract tesseract Debian Ubuntu

References

  • report
    https://bugzilla.suse.com/1282863
  • web
    https://www.suse.com/security/cve/CVE-2026-88053