CVE-2026-73066

A flaw was found in Tesseract, an open-source Optical Character Recognition (OCR) engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer multiplication can occur, leading to an undersized buffer and a heap out-of-bounds write. This vulnerability could result in a denial of service or potentially arbitrary code execution.

Red Hat has rated this vulnerability as having an impact of Important because an out-of-bounds heap write during model processing can lead to arbitrary code execution or application crashes. Under default deployments across Red Hat platforms, Tesseract relies on verified, system-provided language packs, limiting exposure in standard use. The risk primarily manifests in automated document processing workflows or services that allow external users to submit untrusted trained model files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing .traineddata files from untrusted sources with Tesseract. Ensure that only .traineddata files from known, reputable origins are used for OCR recognition.