Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-44602

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

Description

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

torproject Tor

Default version status: unaffected

  • 0 to < 0.4.9.7affected

References