alsa-2026:95086

osv_almalinux
Description

A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005. Security Fix(es): * tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048) * tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047) * tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049) * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051) * tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053) * tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [
    {
      "database_specific": {
        "source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:95086.json"
      },
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "tesseract-devel",
        "purl": "pkg:rpm/almalinux/tesseract-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.1.1-11.el9_8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was open-sourced by HP and UNLV in 2005.  \n\nSecurity Fix(es):  \n\n  * tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data (CVE-2026-88048)\n  * tesseract: Tesseract: Stack buffer overflow via crafted .traineddata file (CVE-2026-88047)\n  * tesseract: Tesseract: Heap out-of-bounds write allows arbitrary code execution or denial of service (CVE-2026-88049)\n  * tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata model (CVE-2026-88051)\n  * tesseract: Tesseract: Heap out-of-bounds write leads to heap corruption via crafted data file (CVE-2026-88053)\n  * tesseract: Tesseract: Heap out-of-bounds write can lead to arbitrary code execution (CVE-2026-88052)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:95086",
  "modified": "2026-11-05T00:00:02.268455592Z",
  "published": "2026-11-04T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:95086"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88047"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88048"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88049"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88051"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88052"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-88053"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531546"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531550"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531554"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531566"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531573"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2531579"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2026-95086.html"
    }
  ],
  "related": [
    "CVE-2026-88047",
    "CVE-2026-88048",
    "CVE-2026-88049",
    "CVE-2026-88051",
    "CVE-2026-88052",
    "CVE-2026-88053"
  ],
  "schema_version": "1.9.2",
  "summary": "Important: tesseract security update",
  "upstream": [
    "CVE-2026-88047",
    "CVE-2026-88048",
    "CVE-2026-88049",
    "CVE-2026-88051",
    "CVE-2026-88052",
    "CVE-2026-88053"
  ]
}
View JSON API Download JSON