CVE-2026-77587

Tor before 0.4.9.11 is prone to a use-after-free and potential double free of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026...

CVE-2026-77587

Tor before 0.4.9.11 is prone to a use-after-free and potential double free of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026...

CVE-2026-77587

Tor before 0.4.9.11 is affected by a use-after-free (and potential double free) in the conflux subsystem. The flaw occurs when a recovery leg revives a conflux set whose last linked leg has already been closed, allowing a malicious exit node to crash a client, resulting in a denial of service (TR...

PT-2026-79133

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.4.9.11 Description A use-after-free and potential double free issue occurs involving a conflux object. This happens when a recovery leg revives a conflux set where the last linked leg has already been closed. A maliciou...