{
  "affected": [
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:95086.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "tesseract-devel",
        "purl": "pkg:rpm/almalinux/tesseract-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.1.1-11.el9_8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.  \n\nSecurity Fix(es):  \n\n  * tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048)\n  * tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047)\n  * tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049)\n  * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051)\n  * tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053)\n  * tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:95086",
  "modified": "2026-11-05T00:00:02.268455592Z",
  "published": "2026-11-04T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:95086"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88047"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88048"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88049"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88051"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88052"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88053"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531546"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531550"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531554"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531566"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531573"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531579"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2026-95086.html"
    }
  ],
  "related": [
    "CVE-2026-88047",
    "CVE-2026-88048",
    "CVE-2026-88049",
    "CVE-2026-88051",
    "CVE-2026-88052",
    "CVE-2026-88053"
  ],
  "schema_version": "1.9.2",
  "summary": "Important: tesseract security update",
  "upstream": [
    "CVE-2026-88047",
    "CVE-2026-88048",
    "CVE-2026-88049",
    "CVE-2026-88051",
    "CVE-2026-88052",
    "CVE-2026-88053"
  ]
}