Known vulnerabilities in tesseract
Vendor:
tesseract-ocr
Software:
tesseract
Software CPE:
cpe:2.3:a:tesseract-ocr:tesseract:*:*:*:*:*:*:*:*
Website:
https://github.com/tesseract-ocr/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140986 - Out-of-bounds write CVE-2026-73066 |
CWE-787 | Medium | 5.5.3 | 05.08.2026 |
SB2026080550 |
||
| #VU140985 - Out-of-bounds read CVE-2026-73067 |
CWE-125 | Medium | 5.5.3 | 05.08.2026 |
SB2026080550 |
||
| #VU35068 - Improper Link Resolution Before File Access ('Link Following') CVE-2011-1136 |
CWE-59 | Low | - | 14.11.2019 |
SB2019111449 |