RHSA-2026:98514: Important: tesseract security update
A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.Security Fix(es): tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048) tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047) tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049) tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051) tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053) tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/tesseractto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9 - Upgrade
Upgrade
redhat/tesseract-debuginfoto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9 - Upgrade
Upgrade
redhat/tesseract-debugsourceto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9 - Upgrade
Upgrade
redhat/tesseract-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9 - Upgrade
Upgrade
redhat/tesseractto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9.aa - Upgrade
Upgrade
redhat/tesseract-debuginfoto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9.aa - Upgrade
Upgrade
redhat/tesseract-debugsourceto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9.aa - Upgrade
Upgrade
redhat/tesseract-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9.aa - Upgrade
Upgrade
redhat/tesseract-develto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9 - Upgrade
Upgrade
redhat/tesseract-develto a version that resolves this vulnerability.Fixed in 4.1.1-11.el9_9.aa
Event History
Frequently Asked Questions
What input would an attacker need to control to exploit these flaws?
The issues are triggered by crafted data, including crafted .traineddata files and traineddata models. Other affected cases are described as crafted data or data files.
What could successful exploitation cause?
Reported impacts include information disclosure, denial of service, heap corruption, and arbitrary code execution. The stack buffer overflow is triggered through a crafted .traineddata file.
Which installed packages are identified in this update?
The advisory lists redhat/tesseract, redhat/tesseract-debuginfo, redhat/tesseract-debugsource, redhat/tesseract-tools-debuginfo, and redhat/tesseract-devel.