Out-of-bounds Memory Access Vulnerability in Tor by Tor Project

CVE-2021-34550

What is CVE-2021-34550?

An issue identified in Tor versions prior to 0.4.6.5 could lead to out-of-bounds memory access when parsing v3 onion service descriptors. This vulnerability may result in crashes for clients interacting with malicious onion services, posing a significant risk to user stability. Attackers could exploit this flaw by providing crafted descriptors that trigger the error, allowing them to disrupt service availability.

References