The vulnerabilities of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...