Tor versions prior to 0.4.9.7 contain an out-of-bounds read vulnerability caused by processing a malformed BEGIN cell. This flaw allows reading one byte beyond the intended buffer boundary, potentially leading to application instability or denial of service.