A crafted .traineddata model can cause a heap out-of-bounds read and process crash in Tesseract OCR engine versions before 5.5.3. This issue arises when loading a specially crafted .traineddata model through TessBaseAPI::Init, which can lead to SquishedDawg::read_squished_dawg in src/dict/dawg.cpp accepting an unterminated forward-edge run. As a result, SquishedDawg::Load calls num_forward_edges(0) and la [truncated]
CVE-2026-73066 is a vulnerability in the Tesseract open-source OCR engine, which could lead to a heap out-of-bounds write during OCR recognition. The issue is caused by an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp, which can wrap the convolution output-channel count, undersizing the forward-pass output buffer. The issue is fixed in version 5.5.3. Defenders r [truncated]
