CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whitespace-delimited token into a fixed 61-byte stack buffer without setting a stream width. The 100-byte line buffer can carry a token of up to 99 characters, so a token longer than 60 characters writes up to 39 attacker-controlled bytes past the buffer during TessBaseAPI::Init of the legacy engine, causing stack corruption, denial of service, and potentially control-flow hijacking on affected standard-library implementations. Builds using Apple's libc++ C++20 bounded array overload are incidentally protected, while typical libstdc++ builds remain affected. No fixed release is available as of this review.

• CWE-121

• https://github.com/tesseract-ocr/tesseract/commit/1bda5079b1c8a7e25f523486837426903d29ce84
• https://github.com/tesseract-ocr/tesseract/security/advisories/GHSA-5j2p-r5vc-q7f3

Published

Sep 10, 2026

Last Modified

Sep 10, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88036Improper neutralization of special elements in data query lo…8.3
• CVE-2026-88038cookies is a Node.js library for reading and writing HTTP co…4.8
• CVE-2026-8804Puppet resource_api (shipped in Puppet Core 8.x and Puppet E…6.7
• CVE-2026-88044rclone is a command-line program to sync files and directori…9.1
• CVE-2026-88045rclone is a command-line program to sync files and directori…7.5
• CVE-2026-88046rclone is a command-line program to sync files and directori…5.3
• CVE-2026-88048Tesseract is an open source OCR engine. In version 5.5.3 and…8.6
• CVE-2026-88049Tesseract is an open source OCR engine. In version 5.5.3 and…8.6
• CVE-2026-8805Integer Overflow or Wraparound vulnerability in the EtherNet…8.7
• CVE-2026-88050Tesseract is an open source OCR engine. In version 5.5.3 and…6.9
• CVE-2026-88051Tesseract is an open source OCR engine. In version 5.5.3 and…8.6
• CVE-2026-88052Tesseract is an open source OCR engine. In version 5.5.3 and…7.8