CVE-2026-77642
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles…
Published: 2026-08-20 · CVSS: 7.5 · CVSS 3.1
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7