Medium [CVE-2026-73067] Denial of Service due to crafted data model
This medium-severity Red Hat Linux advisory covers CVE-2026-73067.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Tesseract is an open source OCR engine.
Prior to 5.5.3, a crafted.traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing.
This issue is fixed in version 5.5.3. A remote attacker could exploit this vulnerability by providing a specially crafted `.traineddata` model.
When this malicious model is loaded, it can cause the software to read beyond its allocated memory, leading to a process crash. This results in a denial of service, making the Tesseract application unavailable.
This issue requires a user to load an untrusted model file, limiting the attack surface. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Weakness: CWE-125.
- < 5.5.3
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Mitigation checklist
- Only use .traineddata model files obtained from trusted sources. Do not load model files from untrusted or unknown origins.
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.