CVE-2026-73066

Tesseract prior to 5.5.3 is affected by a heap out-of-bounds write in LSTM Convolve via a crafted .traineddata loaded through the deserializer. The root cause is an unchecked signed integer multiplication that wraps the convolution output-channel count, undersizing the forward-pass output buffer ...