CyberRota Analysis
AI-GeneratedThe Tesseract OCR engine versions 5.5.3 and earlier are vulnerable due to improper validation of deserialized layer scalars, which can lead to heap out-of-bounds writes and reads during the processing of crafted NT_SOFTMAX layers. This vulnerability may result in heap corruption, application crashes, and potential information disclosure. Organizations using Tesseract for OCR tasks should prioritize this issue, especially those handling sensitive data or relying on the stability of the OCR engine.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in src/lstm/weightmatrix.cpp writes w.dim1() results into temp_line, which is sized from no_, and reads w.dim2() minus one inputs from curr_input, which is sized from ni_. A crafted .traineddata NT_SOFTMAX layer can therefore use inconsistent dimensions to cause a heap out-of-bounds write and read on the default LSTM engine, resulting in heap corruption, a crash, information disclosure, or potentially controlled corruption. No fixed release is available as of this review.
Related CVEs
Other vulnerabilities affecting the same vendor(s)