CVE-2026-119340: tesseract-ocr tesseract, грешка в паметта

Описание

Оригинално описание

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with UINT16_MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535 product can create inconsistent allocation state and later out-of-bounds accesses while loading a crafted traineddata file, causing denial of service. This issue is fixed in version 5.5.4.

Засегнати продукти

• tesseract-ocr tesseract: < 5.5.4

Вид слабост

• CWE-190 Целочислено препълване отгоре
• CWE-681 Incorrect Conversion between Numeric Types

История

Други уязвимости в tesseract-ocr tesseract

• 0.0CVE-2026-119341
• 5.5CVE-2026-119339
• 6.9CVE-2026-119338
• 6.9CVE-2026-88054
• 8.6CVE-2026-88053

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-119340
• https://nvd.nist.gov/vuln/detail/CVE-2026-119340
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-6xhq-wvww-6xfg
• https://github.com/tesseract-ocr/tesseract/pull/4649
• https://github.com/tesseract-ocr/tesseract/commit/048e92378f1a34dcdaf94bc515c7552ac01f08ef
• https://github.com/tesseract-ocr/tesseract/releases/tag/5.5.4