Memory Corruption in Tesseract OCR Engine Due to Improper Pointer Handling
CVE-2026-119341

NONE

Key Information:

Vendor

Tesseract-ocr

Status
Tesseract
Vendor
CVE Published:
30 October 2026

What is CVE-2026-119341?

The Tesseract OCR Engine prior to version 5.5.4 contains a vulnerability in the ReadAdaptedClass function, where certain pointer fields are not appropriately neutralized. This weakness allows attackers to manipulate the output-basename .a file, potentially redirecting file-controlled pointers during the destruction of ADAPT_CLASS_STRUCT objects. Such manipulation can lead to significant memory corruption, resulting in a denial of service situation. The vulnerability is rectified in version 5.5.4.

Affected Version(s)

tesseract < 5.5.3

References

https://github.com/tesseract-ocr/tesseract/security/advis...
x_refsource_CONFIRM
https://github.com/tesseract-ocr/tesseract/pull/4645
x_refsource_MISC
https://github.com/tesseract-ocr/tesseract/commit/614e971...
x_refsource_MISC

CVSS V3.1

Score:
Severity:
NONE
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.