CVE-2026-44597
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.
Original description
The description as published by the source.
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-44597 tor
- Ubuntu UBUNTU-CVE-2026-44597 tor
References
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.torproject.org
- web forum.torproject.org
- web gitlab.torproject.org
- web openwall.com