CVE-2026-119339

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FASTFLOAT builds, DeSerializeOld invokes ASSERTHOST instead of returning an error, so...