Description
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tesseract-ocr | tesseract | < 5.5.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tesseract | No fix yet | — |
| Debian 13 | tesseract | No fix yet | — |
| Debian 12 | tesseract | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | tesseract | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 26.04 LTS | tesseract | 5.5.0-1ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 24.04 LTS | tesseract | 5.3.4-1ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 22.04 LTS | tesseract | 4.1.1-2.1ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 20.04 LTS | tesseract | 4.1.1-2ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 18.04 LTS | tesseract | 4.00~git2288-10f4998a-2ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 16.04 LTS | tesseract | 3.04.01-4ubuntu0.1~esm1 | USN-8882-1 |
| Ubuntu Pro 14.04 LTS | tesseract | 3.03.02-3ubuntu0.1~esm1 | USN-8882-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | tesseract +1 | 5.3.4-7.el10_2 | RHSA-2026:67830 |
| RHEL 9 | tesseract +1 | 4.1.1-8.el9_8 | RHSA-2026:67831 |
| RHEL 8 | tesseract +1 | 4.1.1-3.el8_10 | RHSA-2026:67832 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | tesseract +1 | 5.3.4-6.el10_0.1 | RHSA-2026:71566 |
| RHEL 9.6 EUS | tesseract +1 | 4.1.1-7.el9_6.1 | RHSA-2026:71567 |
| RHEL 9.4 E4S | tesseract | 4.1.1-7.el9_4.1 | RHSA-2026:71568 |
| RHEL 9.2 E4S | tesseract | 4.1.1-7.el9_2.1 | RHSA-2026:72280 |
| RHEL 8.8 TUS | tesseract | 4.1.1-2.el8_8.1 | RHSA-2026:69111 |
| RHEL 8.8 E4S | tesseract | 4.1.1-2.el8_8.1 | RHSA-2026:69111 |
| RHEL 8.6 EUS Long Life | tesseract | 4.1.1-2.el8_6.1 | RHSA-2026:69495 |
| RHEL 8.6 AUS | tesseract | 4.1.1-2.el8_6.1 | RHSA-2026:69495 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | tesseract +1 | 4.1.1-8.el9_8 | ALSA-2026:67831 |
| AlmaLinux 8 | tesseract +1 | 4.1.1-3.el8_10 | ALSA-2026:67832 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | tesseract | 5.3.4-7.el10_2 | RLSA-2026:67830 |
| Rocky Linux 9 | tesseract | 4.1.1-8.el9_8 | RLSA-2026:67831 |
| Rocky Linux 8 | tesseract | 4.1.1-3.el8_10 | RLSA-2026:67832 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | tesseract +1 | 5.3.4-7.el10_2 | ELSA-2026-67830 |
| Oracle Linux 9 | tesseract +1 | 4.1.1-8.el9_8 | ELSA-2026-67831 |
| Oracle Linux 8 | tesseract +1 | 4.1.1-3.el8_10 | ELSA-2026-67832 |
Advisories 19
- WID-SEC-2026-3382 Red Hat Enterprise Linux (firewalld, leapp-repository, tesseract): Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 29, 2026
- ALSA-2026:67831 Important: tesseract security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:67832 Important: tesseract security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:72280 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:71567 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:71568 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:71566 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:69495 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:69111 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:67832 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:67830 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:67831 Red Hat Security Advisory: tesseract security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- USN-8882-1 tesseract vulnerabilities Ubuntu Security Notices (USN) · Oct 6, 2026
- RLSA-2026:67830 Important: tesseract security update Rocky Linux Security Advisories · Sep 17, 2026
- RLSA-2026:67832 Important: tesseract security update Rocky Linux Security Advisories · Sep 17, 2026
- RLSA-2026:67831 Important: tesseract security update Rocky Linux Security Advisories · Sep 17, 2026
- ELSA-2026-67830 Important: tesseract security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026
- ELSA-2026-67831 Important: tesseract security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026
- ELSA-2026-67832 Important: tesseract security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026