Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-73066 →
UBUNTU-CVE-2026-73066
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-bounds write during OCR recognition. This issue is fixed in version 5.5.3.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Ubuntu:Pro:18.04:LTS
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.00~git2288-10f4998a-2ubuntu0.1~esm1"}]}]
Ubuntu:Pro:20.04:LTS
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}]
Ubuntu:Pro:22.04:LTS
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2.1ubuntu0.1~esm1"}]}]
Ubuntu:Pro:24.04:LTS
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.4-1ubuntu0.1~esm1"}]}]
Ubuntu:26.10
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:26.04:LTS
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1ubuntu0.1~esm1"}]}]
Références
- advisory ubuntu.com
- report ubuntu.com
- report cve.org
- report github.com
- report github.com
- report github.com
- report github.com