Tesseract Project Tesseract vulnerabilities

3 known vulnerabilities affecting tesseract_project/tesseract.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2022-38266MEDIUMCVSS 6.5v5.0.02022-09-09

CVE-2022-38266 [MEDIUM] CWE-369 CVE-2022-38266: An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

CVE-2021-36081HIGHCVSS 7.8≥ 0, < 5.1.0-12021-07-01

CVE-2021-36081 [HIGH] CVE-2021-36081: Tesseract OCR 5 Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

CVE-2011-1136MEDIUMCVSS 4.7v2.03v2.042019-11-14

CVE-2011-1136 [MEDIUM] CWE-59 CVE-2011-1136: In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and c In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.