CVE-2026-119338
tesseract: tesseract: Denial of Service via crafted right-to-left text rendering
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 31, 2026
Updated · October 31, 2026
Description
A flaw was found in Tesseract. The page rendering component mishandles memory while processing right-to-left text layouts, leading to a use-after-free and double-free condition. An attacker could exploit this vulnerability by providing a specially crafted document or image, causing the application to crash, resulting in a Denial of Service (DoS), or potentially corrupting memory.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-825 · Expired Pointer Dereference