CyberRota Analysis
AI-GeneratedThe Tesseract OCR engine versions 5.5.3 and earlier are vulnerable due to a stack buffer overflow in the Classify::ReadNormProtos function, which can lead to stack corruption and potential control-flow hijacking. This vulnerability poses a high risk of denial of service and exploitation, particularly for systems using the standard libstdc++ library. Organizations utilizing Tesseract for OCR processing should prioritize remediation efforts, especially those in sensitive environments or handling untrusted input.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operator>>(char*) to extract a whitespace-delimited token into a fixed 61-byte stack buffer without setting a stream width. The 100-byte line buffer can carry a token of up to 99 characters, so a token longer than 60 characters writes up to 39 attacker-controlled bytes past the buffer during TessBaseAPI::Init of the legacy engine, causing stack corruption, denial of service, and potentially control-flow hijacking on affected standard-library implementations. Builds using Apple's libc++ C++20 bounded array overload are incidentally protected, while typical libstdc++ builds remain affected. No fixed release is available as of this review.
Related CVEs
Other vulnerabilities affecting the same vendor(s)