CVE Database›Document archive›CVE-2026-119338

CVE-2026-119338

tesseract: tesseract: Denial of Service via crafted right-to-left text rendering

Loading…

Severity

Moderate

Red Hat Product Security

6.6

CVSS 3.1

Review impact separately from score.

Published · October 31, 2026

Updated · October 31, 2026

Description

A flaw was found in Tesseract. The page rendering component mishandles memory while processing right-to-left text layouts, leading to a use-after-free and double-free condition. An attacker could exploit this vulnerability by providing a specially crafted document or image, causing the application to crash, resulting in a Denial of Service (DoS), or potentially corrupting memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWE-825 · Expired Pointer Dereference