RHSA-2026:95085: Important: tesseract security update

Q: Which systems are covered by this update?

The advisory lists Red Hat Enterprise Linux for x86_64 and ARM 64, along with Red Hat CodeReady Linux Builder for ARM 64. Affected package entries include tesseract and its devel, debuginfo, debugsource, and tools-debuginfo packages.

Q: What attacker-controlled input is implicated by these flaws?

Several issues are triggered by crafted data, including crafted .traineddata files or models. Systems that process untrusted OCR data or accept externally supplied traineddata files are therefore relevant to triage.

Q: What impact is described if exploitation succeeds?

The listed flaws can cause information disclosure, denial of service, heap corruption, and arbitrary code execution. The affected weakness class is buffer overflow.

Published Nov 4, 2026

Updated

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.Security Fix(es): tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048) tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047) tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049) tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051) tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053) tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

44 affected componentsFixes available

Red Hat Red Hat Enterprise Linux for ARM 64

Red Hat Red Hat Enterprise Linux for x86_64

Red Hat Red Hat CodeReady Linux Builder for ARM 64

Red Hat Red Hat Enterprise Linux for Power, little endian - 4 years of support

Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support

Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support

Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates

Red Hat Red Hat CodeReady Linux Builder for IBM z Systems

Red Hat Red Hat CodeReady Linux Builder for x86_64

Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle

Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates

Red Hat Red Hat Enterprise Linux for x86_64 - 4 years of updates

Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support

Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle

Red Hat Red Hat CodeReady Linux Builder for Power, little endian

Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support

Red Hat Red Hat Enterprise Linux for IBM z Systems

Red Hat Red Hat Enterprise Linux for Power, little endian

Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support

Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle

Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support

Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support

Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support

Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle

redhat/tesseract<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debugsource<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-tools-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debugsource<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-tools-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-debugsource<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-tools-debuginfo<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract<5.3.4-11.el10_2.aa

5.3.4-11.el10_2.aa

redhat/tesseract-debuginfo<5.3.4-11.el10_2.aa

5.3.4-11.el10_2.aa

redhat/tesseract-debugsource<5.3.4-11.el10_2.aa

5.3.4-11.el10_2.aa

redhat/tesseract-tools-debuginfo<5.3.4-11.el10_2.aa

5.3.4-11.el10_2.aa

redhat/tesseract-devel<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-devel<5.3.4-11.el10_2

5.3.4-11.el10_2

redhat/tesseract-devel<5.3.4-11.el10_2.aa

5.3.4-11.el10_2.aa

redhat/tesseract-devel<5.3.4-11.el10_2

5.3.4-11.el10_2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/tesseract to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2
Upgrade
Upgrade redhat/tesseract-debuginfo to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2
Upgrade
Upgrade redhat/tesseract-debugsource to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2
Upgrade
Upgrade redhat/tesseract-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2
Upgrade
Upgrade redhat/tesseract to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2.aa
Upgrade
Upgrade redhat/tesseract-debuginfo to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2.aa
Upgrade
Upgrade redhat/tesseract-debugsource to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2.aa
Upgrade
Upgrade redhat/tesseract-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2.aa
Upgrade
Upgrade redhat/tesseract-devel to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2
Upgrade
Upgrade redhat/tesseract-devel to a version that resolves this vulnerability.
Fixed in 5.3.4-11.el10_2.aa

Event History

Nov 4, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·10:35 AM

Data Sourced

via Red Hat·10:35 AM

Severity

Frequently Asked Questions

Which systems are covered by this update?

The advisory lists Red Hat Enterprise Linux for x86_64 and ARM 64, along with Red Hat CodeReady Linux Builder for ARM 64. Affected package entries include tesseract and its devel, debuginfo, debugsource, and tools-debuginfo packages.

What attacker-controlled input is implicated by these flaws?

Several issues are triggered by crafted data, including crafted .traineddata files or models. Systems that process untrusted OCR data or accept externally supplied traineddata files are therefore relevant to triage.

What impact is described if exploitation succeeds?

The listed flaws can cause information disclosure, denial of service, heap corruption, and arbitrary code execution. The affected weakness class is buffer overflow.

RHSA-2026:95085: Important: tesseract security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are covered by this update?

What attacker-controlled input is implicated by these flaws?

What impact is described if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which systems are covered by this update?

What attacker-controlled input is implicated by these flaws?

What impact is described if exploitation succeeds?