Tor versions before 0.4.9.7 contain an out-of-bounds read vulnerability triggered when an END, TRUNCATE, or TRUNCATED cell lacks a reason in its payload. This flaw is identified as CVE-2026-44597 and is also known as TROVE-2026-011. The vulnerability has a low severity rating and does not impact confidentiality or integrity but may cause a denial of service due to application instability.