Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT`…
Affects Tesseract 5.5.3 and earlier built with FAST_FLOAT, which is on by default, when a crafted LSTM model is loaded. Fixed in 5.5.4.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Specific setups only
- Fix
- Fixed in 5.5.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Tesseract, an open source optical character recognition (OCR) engine, is affected, particularly in its default builds. A specially crafted LSTM model file loaded by the engine can cause the program to crash, resulting in a denial of service.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when kDoubleFlag is clear. In default FAST_FLOAT builds, DeSerializeOld invokes ASSERT_HOST instead of returning an error, so loading a crafted model through TessBaseAPI::Init terminates the process and causes denial of service. This issue is fixed in version 5.5.4.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- tesseract-ocr tesseract
fixed in 5.5.4
References 4
GitHub · tesseract-ocr/tesseract
Questions about CVE-2026-119339
What does this mean?
A crafted LSTM model whose embedded weight matrix mode byte has bit 7 clear triggers an assertion in WeightMatrix::DeSerializeOld, making the process abort. The result is a denial of service when the model is loaded.Source: github.com
Am I affected, and how do I check?
Tesseract 5.5.3 and earlier, when built with FAST_FLOAT, which is enabled by default. The crafted model must be loaded through TessBaseAPI::Init or from a traineddata file containing the blob. The installed version can be checked with tesseract --version.Source: github.com
What should I do about it?
Upgrade to Tesseract 5.5.4, the fixed version.Source: github.com
Is it being exploited?
It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data