CVE-2026-119340 | Tesseract up to 5.5.3 Deserialization src/ccstruct/matrix.h DeSerializeSize out-of-bounds

October 30, 2026 Yanac

A vulnerability was found in Tesseract up to 5.5.3 and classified as problematic. This affects the function GENERIC_2D_ARRAY::DeSerializeSize of the file src/ccstruct/matrix.h of the component Deserialization. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-119340. The attack must be carried out locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More