Threats tagged 'oesa-2026-4109'

Multiple stack and heap buffer overflow vulnerabilities exist in tesseract-ocr version 5.5.3 and earlier. These include a stack-based buffer overflow in Classify::ReadNormProtos, heap out-of-bounds read/write in FullyConnected::DeSerialize, unchecked heap writes in LSTM layers, and other memory corruption issues during parsing of crafted .traineddata files. These flaws can lead to denial of service, crashes, heap corruption, information disclosure, or potentially control-flow hijacking. No fixed releases are available as of the latest review.