Upstream information

CVE-2026-73066 at MITRE

Description

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having not set severity.

CVSS v4 Scores
CVSS detail CNA (GitHub)
Base Score 6.8
Vector CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Attack Requirements None
Privileges Required None
User Interaction Active
Vulnerable System Confidentiality Impact None
Vulnerable System Integrity Impact High
Vulnerable System Availability Impact High
Subsequent System Confidentiality Impact None
Subsequent System Integrity Impact None
Subsequent System Availability Impact None
CVSSv4 Version 4.0
No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Liberty Linux 10
  • tesseract >= 5.3.4-7.el10_2
  • tesseract-devel >= 5.3.4-7.el10_2
 Patchnames:
RHSA-2026:67830 (x86_64)
SUSE Liberty Linux 8
  • tesseract >= 4.1.1-3.el8_10
  • tesseract-devel >= 4.1.1-3.el8_10
 Patchnames:
RHSA-2026:67832 (i686,x86_64)
SUSE Liberty Linux 9
  • tesseract >= 4.1.1-8.el9_8
  • tesseract-devel >= 4.1.1-8.el9_8
 Patchnames:
RHSA-2026:67831 (i686,x86_64)

SUSE Timeline for this CVE

CVE page created: Thu Sep 17 16:06:22 2026
CVE page last modified: Thu Sep 17 22:16:02 2026