CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

DEBIAN-CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

DEBIAN-CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...

CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer underflow vulnerability (CVE-2026-10858)

Summary IBM MQ Appliance has addressed a heap buffer underflow vulnerability that could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code when processing multi-segment messages. Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in cluster migration data processing (CVE-2026-11716)

Summary IBM MQ Appliance has addressed an improper validation vulnerability in cluster migration data processing that could allow an authenticated attacker to cause a denial of service or execute arbitrary code during queue manager startup. Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION:...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability (CVE-2026-11381)

Summary IBM MQ Appliance has addressed a heap buffer overflow vulnerability. Vulnerability Details CVEID:CVE-2026-11381 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution...

Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability in MQINQ request validation (CVE-2026-10744)

Summary IBM MQ Appliance has addressed an integer overflow vulnerability in MQINQ request validation that could allow an authenticated attacker to cause a denial of service or potentially escalate privileges. Vulnerability Details CVEID:CVE-2026-10744 DESCRIPTION: IBM MQ could allow an...

CVE-2026-88049

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit a heap out-of-bounds write vulnerability in the LSTM::Forward function by providing a specially crafted input. This could lead to heap corruption, application crashes, or...

CVE-2026-88048

A flaw was found in Tesseract. The FullyConnected::DeSerialize function does not properly validate the dimensions of deserialized layers against the weight-matrix dimensions. This vulnerability allows a remote attacker to provide a specially crafted .traineddata file, leading to a heap...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing (CVE-2026-10747)

Summary IBM MQ Appliance has addressed a heap buffer overflow vulnerability in protocol message processing that could allow a remote attacker to cause a denial of service or execute arbitrary code prior to authentication. Vulnerability Details CVEID:CVE-2026-10747 DESCRIPTION: IBM MQ could allow ...

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

CVE-2026-88049 Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

CVE-2026-88049

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

CVE-2026-88049

Tesseract (open-source OCR engine) versions 5.5.3 and earlier are affected by a heap out-of-bounds write in LSTM::Forward (src/lstm/lstm.cpp). Prior hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTim...

EUVD-2026-75592

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

CVE-2026-88049 Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left NetworkIO::WriteTimeStepPart and NetworkIO::AddTimeStepPart unchecked. In...

CVE-2026-88048 Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...

CVE-2026-88048

Tesseract OCR (open source) is affected through version 5.5.3 and earlier. The flaw resides in FullyConnected::DeSerialize (src/lstm/fullyconnected.cpp), which fails to validate deserialized layer scalars ni_ and no_ against weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVecto...