tesseract

Pruebas unitarias de Tesseract Requisitos Archivos y estructura root@kitploit: ├── langdatalstm │ ├── common.punc │ ├── common.unicharambigs │ ├── desiredbigrams.txt │ ├── eng │ │ ├── desiredcharacters │ │ ├── eng.config │ │ ├── eng.numbers │ │ ├── eng.punc │ │ ├──...

ocr-recon

ocr-recon 该工具利用 tesseract 的 OCR（光学字符识别）功能，在 URL 列表中查找特定字符串。 用法 用法: python3 ocr-recon.py listwithURLs stringtosearch...

Important: Red Hat Security Advisory: tesseract security update

An update for tesseract is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

CVE-2026-26832

CVE-2026-26832: node-tesseract-ocr 中的操作系统命令注入 摘要 node-tesseract-ocr 至版本 2.2.1 允许在 src/index.js 的 recognize 中进行操作系统命令注入。该包构建一个 shell 命令字符串并使用 childprocess.exec 执行它。由于输入路径仅用双引号包裹，攻击者可以通过精心构造的文件路径注入 shell 语法。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- node-tesseract-ocr| 所有 2.2.1 及之前版本| 截至 2026-03-24 无可用修复...

MiracleLinux 9 : tesseract-4.1.1-8.el9_8 (AXSA:2026-1878:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1878:02 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from th...

tesseract security update

An update is available for tesseract. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 an...

RLSA-2026:67830 Important: tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...

RLSA-2026:67832 Important: tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...

tesseract security update

An update is available for tesseract. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 and...

RLSA-2026:67831 Important: tesseract security update

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fixes: tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 For more...

tesseract security update

An update is available for tesseract. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A commercial quality OCR engine originally developed at HP between 1985 and...

RockyLinux 8 : tesseract (RLSA-2026:67832)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67832 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : tesseract-4.1.1-3.el8_10 (AXSA:2026-1866:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1866:01 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from th...

AlmaLinux 9 : tesseract (ALSA-2026:67831)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67831 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : tesseract (RLSA-2026:67830)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67830 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

RockyLinux 9 : tesseract (RLSA-2026:67831)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67831 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

The vulnerability of the Classify::ReadNormProtos function in the Tesseract optical character recognition system allows a perpetrator to cause a service failure.

The vulnerability of the Classify::ReadNormProtos function in the Tesseract OCR system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system is related to reading data beyond the allowable range in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerabilities of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...