CVE-2026-77584

A flaw was found in Tor where a malicious client could trigger a use-after-free UAF vulnerability. This occurs when the software fails to properly manage memory after a circuit is freed, specifically due to the improper handling of CONFLUXLINK cells on circuits with attached streams. By sending a...

PT-2026-79132

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.4.9.10 Description The software fails to reject a CONFLUX LINK cell when it arrives on a circuit that already has attached streams. A malicious client can send a RELAY COMMAND BEGIN before the CONFLUX LINK on the same...