CVE-2026-73067
CVE-2026-73067: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.5
Medium [CVE-2026-73067] Denial of Service due to crafted data model
CVE-2026-73067Source published Source updated
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted.traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls num_forward_edges(0) and last_edge in src/dict/dawg.h reads beyond edges_, causing a heap out-of-bounds read and process crash before image processing. This issue is fixed in version 5.5.3. A remote attacker could exploit this vulnerability by providing a specially crafted `.traineddata` model. When this malicious model is loaded, it can cause the software to read beyond its allocated memory, leading to a process crash. This results in a denial of service, making the Tesseract application unavailable. This issue requires a user to…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- < 5.5.3
- Source-reported fixed versions
- 5.5.3
- Mitigation guidance
- Only use .traineddata model files obtained from trusted sources. Do not load model files from untrusted or unknown origins.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.