low3.7
CVE-2026-44602
Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.
Impact
Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torproject | Tor | before 0.4.9.7 |