CVE-2026-73067: Tesseract: Heap OOB read in the DAWG loader
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges(0) and lastedge in src/dict/dawg.h reads beyond edges, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tesseractto a version that resolves this vulnerability.Fixed in 5.5.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73067?
The severity of CVE-2026-73067 is rated as risk 26.
How do I fix CVE-2026-73067?
To fix CVE-2026-73067, upgrade to Tesseract version 5.5.3 or later.
What are the potential impacts of CVE-2026-73067?
CVE-2026-73067 may lead to a heap out-of-bounds read, potentially resulting in information disclosure or application crashes.
Which software is affected by CVE-2026-73067?
CVE-2026-73067 affects the Tesseract OCR Engine prior to version 5.5.3.
How is CVE-2026-73067 exploited?
CVE-2026-73067 can be exploited by loading a crafted .traineddata model through the TessBaseAPI::Init function.