tesseract.

Tesseract: File-controlled pointers still reach `delete` in ADAPT_CLASS_STRUCT destructor

• tesseract
• Memory corruption

Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions

• tesseract
• Memory corruption
• CWE-681

Tesseract: Crafted LSTM model (`WeightMatrix` mode byte) triggers `ASSERT_HOST` abort in `WeightMatrix::DeSerializeOld` under `FAST_FLOAT` — Denial of Service

• tesseract
• Denial of service
• CWE-20

Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages

• tesseract
• Memory corruption

Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load

• tesseract
• Memory corruption

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

• tesseract
• Memory corruption

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

• tesseract
• Memory corruption
• CWE-129

Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

• tesseract
• Memory corruption

Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

• tesseract
• Memory corruption

Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

• tesseract
• Memory corruption

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

• tesseract
• Memory corruption

Tesseract: ReadNormProtos stack buffer overflow

• tesseract
• Memory corruption

Tesseract: Heap OOB read in the DAWG loader

• tesseract
• Memory corruption

Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata

• tesseract
• Memory corruption