Tor Out-of-Bounds Read Vulnerability in Cell Handling

A vulnerability in Tor versions prior to 0.4.9.7 allows for an out-of-bounds read in the cell handling process. This issue occurs when END, TRUNCATE, or TRUNCATED cells are received without a reason in their payload. The vulnerability has been identified and documented as TROVE-2026-011.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be exploited to cause a denial-of-service or to read sensitive memory contents.

Remediation

Users are advised to upgrade to Tor version 0.4.9.7, which addresses this vulnerability. Instructions for downloading the latest version can be found on the Tor Project's official website.