Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-77642 Out-of-Bounds Write in Tor Before 0.4.9.9 Due to Unexpected Signature Digest Type https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77642
Post summary
The post simply announces a new CVE (CVE‑2026‑77642) describing an out‑of‑bounds write in Tor instances prior to 0.4.9.9, without providing any PoC, exploit code, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | torproject | tor | - | - | - |