Out-of-bounds write in tesseract - CVE-2026-73066

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU140986

Out-of-bounds write in tesseract - CVE-2026-73066

Published: August 5, 2026 / Updated: August 13, 2026


Vulnerability identifier: #VU140986
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-73066
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds write in the LSTM Convolve layer when parsing a crafted .traineddata LSTM model component during ordinary OCR recognition. A remote attacker can supply a specially crafted .traineddata file to cause a denial of service.

The issue is triggered after the malicious model file is loaded through Tesseract's .traineddata deserializer.


Affected software

tesseract
Red Hat CodeReady Linux Builder for Power, little endian
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
openEuler
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
tesseract (Red Hat package)
tesseract-devel
tesseract
tesseract-tools
tesseract-debugsource
tesseract-debuginfo

How to mitigate CVE-2026-73066

Install security update from vendor's website.

tesseract - update to 5.5.3
tesseract (Red Hat package) - addressed in versions 4.1.1-2.el8_6.1, 4.1.1-2.el8_8.1, 4.1.1-3.el8_10, 4.1.1-7.el9_4.1, 4.1.1-8.el9_8, 5.3.4-6.el10_0.1, 5.3.4-7.el10_2
tesseract-devel - update to 4.1.1-3
tesseract - update to 4.1.1-3
tesseract-tools - update to 5.5.3-1
tesseract-devel - update to 5.5.3-1
tesseract-debugsource - update to 5.5.3-1
tesseract-debuginfo - update to 5.5.3-1
tesseract - update to 5.5.3-1

External References

Related Security Bulletins