Openwall Security Update: Fixes OOB Read/Crashes in Cell Handling, Relay, and Onion Service

Vulnerability Overview Openwall has released a security update addressing multiple critical vulnerabilities. These include: 1. Major bugfixes (cell handling): - Fixes an out-of-bounds read issue that could occur when , , and cells are present in the payload. - CVE/Trove ID: TROVE-2026-011 - Discovered by: Brian Carpenter (genki) - Fix version: bugfix 41254 2. Major bugfixes (conflux): - Fixes an issue where the system attempted to accept or process cells from conflux legs. - CVE/Trove ID: TROVE-2026-008 - Discovered by: Anas Cherni (Calif.io) in collaboration with Claude and Anthropic Research - Fix version: bugfix 41243 3. Major bugfixes (conflux, relay): - Fixes an accounting issue in the conflux out-of-order queue during queue clearing. - CVE/Trove ID: TROVE-2026-010 - Discovered by: aptupdate - Fix version: bugfix 41251 4. Major bugfixes (pathbias): - Fixes client crashes caused by double circuit closure, particularly under conditions of circuit queue memory pressure. - CVE/Trove ID: TROVE-2026-009 - Discovered by: cyberpunka - Fix version: bugfix 41237 5. Major bugfixes (relay): - Fixes a potential null pointer dereference issue when receiving CERT cells. - CVE/Trove ID: TROVE-2026-006 - Discovered by: Pwame - Fix version: bugfix 41240 6. Major bugfixes (relay, onion service): - Fixes an out-of-bounds read issue that could occur when receiving malformed cells. - CVE/Trove ID: TROVE-2026-007 - Discovered by: Flanagan - Fix version: bugfix 41245 Impact Scope These vulnerabilities affect multiple components of Openwall, including , , , , and . Specifically affected versions include 0.4.9.6 and 0.4.9.7. Remediation Users are advised to upgrade to the latest version as soon as possible to address the aforementioned vulnerabilities. The specific fix versions are as follows: : bugfix 41254 : bugfix 41243 : bugfix 41251 : bugfix 41237 : bugfix 41240 : bugfix 41245 Additional Information Vulnerability details are private; therefore, no further information is provided. No Proof of Concept (PoC) code or exploit code is included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

Openwall Security Update: Fixes OOB Read/Crashes in Cell Handling, Relay, and Onion Service