Search: CVE-2026-88048

CVE-2026-88048 is a high-severity vulnerability in the open source OCR engine Tesseract, affecting version 5.5.3 and earlier. The flaw arises from improper validation of deserialized layer scalars in the FullyConnected::DeSerialize function, leading to inconsistent dimensions used during matrix operations. This can cause heap out-of-bounds reads and writes, resulting in heap corruption, crashes, information disclosure, or potentially controlled memory corruption. No official fix or patch is available as of the latest review.