CVE-2026-88051

Katalog CVE

CVSS 7.8 · High EPSS 0,17%

Kerentanan Out-of-bounds Write pada tesseract-ocr tesseract ocr. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and size_used_ from a .traineddata model without a cap or an invariant check. reserve(reserved) allocates the backing array, but the callback loop writes size_used_ elements. A crafted TESSDATA_INTTEMP component with version_id 4 or later can therefore set reserved to a small value and size_used_ to a large value when fontinfo_table_.read(fp, read_info) is called from src/classify/intproto.cpp, causing a heap out-of-bounds write of FontInfo structures, heap corruption, a crash, or potentially controlled corruption. No fixed release is available as of this review.

Rincian

Terbit di NVD

10 September 2026

Terakhir diubah

16 September 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-88qp-4g94-3rf3 exploit · mitigasi · advisory vendor
• https://github.com/tesseract-ocr/tesseract/commit/56e09ca12e751623fe796ce1554ce704bffd2ef0 patch