Vulnerability Details CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NT_SERIES, NT_PARALLEL, or NT_REVERSED layers in a crafted .traineddata model. During LSTMRecognizer initialization in src/lstm/lstmrecognizer.cpp, CacheXScaleFactor(XScaleFactor()) reaches Series::CacheXScaleFactor in src/lstm/series.cpp, which dereferences stack_[0] on the empty vector and invokes a virtual method through an invalid Network pointer. This causes a deterministic crash and denial of service at model load. No fixed release is available as of this review.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 4.2%
CVSS Severity
CVSS v3 Score 5.5
References
Products affected by CVE-2026-88054
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:1.03
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:1.04
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:2.00
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:2.01
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:2.02
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:2.03
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:2.04
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.00
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.01
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.02.02
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.03
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.04
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.04.00
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.04.01
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.05.00
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.05.01
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:3.05.02
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.0.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.00.00
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.1.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.1.1
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.1.2
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:4.1.3
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.0.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.0.1
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.1.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.2.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.3.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.3.1
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.3.2
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.3.3
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.3.4
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.4.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.4.1
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.5.0
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.5.1
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.5.2
-
cpe:2.3:a:tesseract-ocr:tesseract_ocr:5.5.3