Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2026/09/10 4:24 p.m.•47 views

CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

6.9CVSS0.0015EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/10 4:24 p.m.•10 views

CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

6.9CVSS5.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/10 4:24 p.m.•13 views

CVE-2026-88050 Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

6.9CVSS5.9AI score0.0015EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/10 4:24 p.m.•26 views

CVE-2026-88050

Tesseract (open-source OCR engine) versions 5.5.3 and earlier contain an out-of-bounds write in the UnicharCompress component. The root cause is that RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts negative code_ values from a crafted .traineddata recoder ...

6.9CVSS5.9AI score0.0015EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder