CVE-2026-88048 | tesseract-ocr Tesseract up to 5.5.3 FullyConnected Layer fullyconnected.cpp DeSerialize ni_/no_ heap-based overflow

A vulnerability described as critical has been identified in tesseract-ocr Tesseract up to 5.5.3. Affected is the function FullyConnected::DeSerialize of the file src/lstm/fullyconnected.cpp of the component FullyConnected Layer. Executing a manipulation of the argument ni_/no_ can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-88048. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More