CVE-2026-119338 Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while receiving it by value, leaving linetoprtlpts and linebottomrtlpts dangling. On an upright Hebrew or Arabic page at the defaul...

CVE-2026-119338

The Tesseract OCR engine contains a double free and use after free vulnerability in the PAGE XML renderer affecting versions 5.4.0 through 5.5.4 . The root cause is located in src/api/pagerenderer.cpp within the AppendLinePolygon function, which destroys a caller-owned right-to-left Pta accumulat...