CVE-2026-119339 Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FASTFLOAT builds, DeSerializeOld invokes ASSERTHOST instead of returning an error, so...

CVE-2026-119339

The Tesseract OCR engine is vulnerable to a Denial of Service (DoS) attack in versions prior to 5.5.4 . The issue resides in the WeightMatrix::DeSerialize function, which trusts a mode byte from a traineddata LSTM network. When the kDoubleFlag is clear, the system calls WeightMatrix::DeSerializeO...

arrow:arrow-csv-fuzz: Heap-buffer-overflow in arrow_vendored::fast_float::from_chars_result arrow_vendored::fast_float::detail

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5003506164760576 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-csv-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79848e1e51...

RUSTSEC-2025-0003 Segmentation fault due to lack of bound check

In this case, the "fastfloat::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...