UBUNTU-CVE-2026-119339: Medium severity ubuntu/tesseract vulnerability

Published Nov 3, 2026

Updated

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FASTFLOAT builds, DeSerializeOld invokes ASSERTHOST instead of returning an error, so loading a crafted model through TessBaseAPI::Init terminates the process and causes denial of service. This issue is fixed in version 5.5.4.

Affected Software

8 affected components

ubuntu/tesseract*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Tesseract to a version that resolves this vulnerability.
Fixed in 5.5.4

Event History

Nov 3, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this denial-of-service issue?

Applications using Tesseract before 5.5.4 are exposed if they can be induced to load an attacker-crafted traineddata LSTM network through TessBaseAPI::Init. The affected behavior occurs in default FAST_FLOAT builds.

What does an attacker need to trigger the issue?

An attacker needs to provide a crafted traineddata model containing an LSTM network with a mode byte that clears kDoubleFlag, and have the application load it. No privileges are required, but user interaction is required according to the supplied severity vector.

What is the impact when exploitation succeeds?

Tesseract terminates the process because DeSerializeOld invokes ASSERT_HOST rather than returning an error. The stated impact is denial of service, with no confidentiality or integrity impact indicated.

How can this be remediated?

Upgrade Tesseract to version 5.5.4, which fixes the issue.

UBUNTU-CVE-2026-119339: Medium severity ubuntu/tesseract vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this denial-of-service issue?

What does an attacker need to trigger the issue?

What is the impact when exploitation succeeds?

How can this be remediated?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this denial-of-service issue?

What does an attacker need to trigger the issue?

What is the impact when exploitation succeeds?

How can this be remediated?