Loading vulnerability…
CVE-2026-73066 is a heap out-of-bounds write in the Tesseract OCR engine prior to version 5.5.3. A crafted LSTM model component can reach Convolve::DeSerialize, where an unchecked signed-integer multiplication wraps the convolution output-channel count. The wrapped value produces an undersized forward-pass output buffer, while subsequent writes use the unwrapped element count, resulting in a heap out-of-bounds write during OCR recognition.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
18 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A heap out-of-bounds write vulnerability in Tesseract OCR that can be triggered by a crafted .traineddata file. The referenced Red Hat Enterprise Linux 8 tesseract package is affected.
A Miracle Linux 9 vulnerability affecting Tesseract packages that may allow high-impact integrity and availability compromise through local attack conditions with required user interaction.
A locally exploitable Miracle Linux 8 vulnerability addressed by advisory AXSA-2026-1866, affecting the tesseract and tesseract-devel packages. It can compromise integrity and availability, requires user interaction, and is rated with local attack vector in the supplied CVSS data.
A Rocky Linux 10 local vulnerability affecting Tesseract-related packages, with high integrity and availability impact according to the supplied CVSS v3/v4 vectors.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.