Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 17:56:38 +0000 CVE-2026-73066 — Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata https://db.gcve.eu/vuln/cve-2026-73066 <p><strong>Affected:</strong> tesseract-ocr tesseract</p> <p>Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract&#39;s deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.</p> <p><strong>Affected:</strong> tesseract-ocr tesseract</p> <p>Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract&#39;s deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.</p> https://db.gcve.eu/vuln/cve-2026-73066