IronOCR Security CVE: Keep Your Data Safe

Curtis Chau

Updated: July 21, 2026

Download IronOCR

• NuGet Download
• DLL Download
• Windows Installer

• ---

• Start Free Trial

Copy for LLMs

• Copy for LLMs

  Copy page as Markdown for LLMs
  # IronOCR Security CVE: Keep Your Data Safe Please see information below regarding IronOCR: 1. All Iron Software products are DigiCert certified. 2. IronOCR does not use web services nor send data across the internet to perform OCR. 3. No COM or COM+ interfaces are exposed in the IronOcr.dll. 4. The library is written in C#, which protects implicitly from many common attack vectors. 5. As few entry points as possible to the API are exposed. 6. Strong naming and sophisticated tamper protection are implemented. 7. The library is regularly scanned with multiple anti-virus and anti-malware scanners, using the highest security and heuristic search for potential threats. 8. Every line of code goes through _at least_ two levels of human review by senior engineers to check for security vulnerabilities. 9. We will disclose that IronOCR will access unmanaged (C++) code:<br /> - `tesseract.dll` - No direct executable entry point to this DLL is distributed nor exposed. - `pdfium.dll` - No direct executable entry point to this DLL is distributed nor exposed. - `leptonica.dll` - No direct executable entry point to this DLL is distributed nor exposed. - `imagemagick.dll` - No direct executable entry point to this DLL is distributed nor exposed. 10. IronOCR makes use of the following .NET dependencies, none of which are known to us as a security attack vector, particularly as every object is internalized to our library (static linking) with no public or external access: [Link](https://ironsoftware.com/csharp/ocr/docs/license/credits/) 11. [ZXing.Net](https://www.nuget.org/packages/ZXing.Net/) 12. [Tesseract.Net](https://www.nuget.org/packages/Tesseract/) 13. [PdfiumLight](https://www.nuget.org/packages/PdfiumLight/) 14. [Magick.NET-Q8-AnyCPU](https://www.nuget.org/packages/Magick.NET-Q8-AnyCPU/) 15. [LibPdfium](https://github.com/azunite/libpdfium) 16. [DotNetZip](https://www.nuget.org/packages/DotNetZip/)

• ---

• Open in ChatGPT

  Ask ChatGPT about this page
• Open in Gemini

  Ask Gemini about this page
• Open in Grok

  Ask Grok about this page
• Open in Perplexity

  Ask Perplexity about this page

Share

• Share on Facebook
• Share on X (Twitter)
• Share on LinkedIn

• ---

• Email article

Please see information below regarding IronOCR:

1. All Iron Software products are DigiCert certified.
2. IronOCR does not use web services nor send data across the internet to perform OCR.
3. No COM or COM+ interfaces are exposed in the IronOcr.dll.
4. The library is written in C#, which protects implicitly from many common attack vectors.
5. As few entry points as possible to the API are exposed.
6. Strong naming and sophisticated tamper protection are implemented.
7. The library is regularly scanned with multiple anti-virus and anti-malware scanners, using the highest security and heuristic search for potential threats.
8. Every line of code goes through at least two levels of human review by senior engineers to check for security vulnerabilities.
9. We will disclose that IronOCR will access unmanaged (C++) code:
   
   • tesseract.dll - No direct executable entry point to this DLL is distributed nor exposed.
   • pdfium.dll - No direct executable entry point to this DLL is distributed nor exposed.
   • leptonica.dll - No direct executable entry point to this DLL is distributed nor exposed.
   • imagemagick.dll - No direct executable entry point to this DLL is distributed nor exposed.
10. IronOCR makes use of the following .NET dependencies, none of which are known to us as a security attack vector, particularly as every object is internalized to our library (static linking) with no public or external access: Link
11. ZXing.Net
12. Tesseract.Net
13. PdfiumLight
14. Magick.NET-Q8-AnyCPU
15. LibPdfium
16. DotNetZip

Curtis Chau

Chat with engineering team now

Technical Writer

Curtis Chau holds a Bachelor’s degree in Computer Science (Carleton University) and specializes in front-end development with expertise in Node.js, TypeScript, JavaScript, and React. Passionate about crafting intuitive and aesthetically pleasing user interfaces, Curtis enjoys working with modern frameworks and creating well-structured, visually appealing manuals.

...

Read More