CVE-2026-88048

A flaw was found in Tesseract. The FullyConnected::DeSerialize function does not properly validate the dimensions of deserialized layers against the weight-matrix dimensions. This vulnerability allows a remote attacker to provide a specially crafted .traineddata file, leading to a heap out-of-bounds write and read during the FullyConnected::Forward operation. Successful exploitation can result in heap corruption, application crashes, or information disclosure.

This vulnerability is rated with an Important severity impact because heap memory corruption from out-of-bounds writes could allow arbitrary code execution or denial of service in applications utilizing the OCR engine. In standard Red Hat Enterprise Linux installations, Tesseract operates using verified system language packs rather than user-supplied models. Risk is primarily limited to custom integrations or automated pipelines that load untrusted language data files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that applications utilizing Tesseract only process .traineddata files from trusted and verified sources. Avoid processing .traineddata files obtained from untrusted or external origins.