tesseract-ocr/tesseract

tesseract-ocr/tesseract

GitHubGitHub
GitHubgithub.com
tesseract-ocr.github.iotesseract-ocr.github.io
Releases68
Frequency3 months 1 week
Last Release
Stars75.5K
Tesseract Open Source OCR Engine (main repository)
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2022-38266NVD↗
= 5.0.06.5 MEDIUM—

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

CVE-2021-36081NVD↗
—7.8 HIGH6.8 MEDIUM

Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.

CVE-2011-1136NVD↗
= 2.04, = 2.034.7 MEDIUM6.3 MEDIUM

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.