T
Vendor security profile
tesseract-ocr
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical0
CISA KEV0
Public exploit10
Patch rate%85
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
8
0
CVE KEV
CVE severity distribution
13toplam CVE
High7 (54%)
Medium6 (46%)
Patch and exploitation view
%85
Verified patch
%0
CISA KEV
%77
Public exploit
11Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.9
CVE-2026-88054
Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load
T
Patch verifiedEPSS %0
8.6
CVE-2026-88053
Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata
T
Patch verifiedEPSS %0
7.8
CVE-2026-88052
Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization
T
Patch verifiedEPSS %0
8.6
CVE-2026-88051
Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields
T
Patch verifiedEPSS %0
6.9
CVE-2026-88050
Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values
T
Patch verifiedEPSS %0
8.6
CVE-2026-88049
Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch
T
Patch verifiedEPSS %0
8.6
CVE-2026-88048
Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch
T
Patch verifiedEPSS %0
8.6
CVE-2026-88047
Tesseract: ReadNormProtos stack buffer overflow
T
Patch verifiedEPSS %0
6.7
CVE-2026-73067
Tesseract: Heap OOB read in the DAWG loader
T
Patch status unknownEPSS %0
6.8
CVE-2026-73066
Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
T
Patch status unknownEPSS %0