CVE-2026-119339

A flaw was found in Tesseract. When loading a specially crafted trained model file, the engine fails to properly validate neural network configuration data, triggering an unhandled assertion failure instead of returning an error. A local attacker or application consumer could exploit this by supplying a malicious model file, causing the process to terminate unexpectedly and resulting in a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.