Security Advisory

CVE-2026-77639

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 20:57:50

Last updated 2026-08-21 20:08:38

Assigner mitre

CVSS score 5.3

State PUBLISHED

Description

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

← Browse all CVEs View on cve.org ↗