CVE-2026-119340

The Tesseract open-source OCR engine is vulnerable to a signed integer comparison bypass in the GENERIC_2D_ARRAY::DeSerializeSize function located in src/ccstruct/matrix.h. In versions prior to 5.5.4 , the software incorrectly reads matrix dimensions as signed int32_t values but only performs che...

CVE-2026-119340 Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC2DARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32t values and compares them only with UINT16MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535 product c...