CVE-2026-77640 | Tor Project prior 0.4.9.9 Decompression buf_add_compress infinite loop

A vulnerability described as problematic has been identified in Tor Project Tor. This affects the function buf_add_compress of the component Decompression. Executing a manipulation can lead to infinite loop.

The identification of this vulnerability is CVE-2026-77640. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More