CVE-2026-119341 Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor

Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPTCLASSSTRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When the legacy engine is selected,...

CVE-2026-119341

The open-source OCR engine Tesseract is vulnerable to memory corruption and denial of service in versions prior to 5.5.4 . The root cause lies in the ReadAdaptedClass function within src/classify/adaptive.cpp, where the engine raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file. I...