🎯 New Report #3701692: Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After Teardown
🔺Severity: Low
👽 Reporter: aptupdate
⭐️ Reputation: 120
🛠 State: resolved
💼 Team: Tor
💵 Bounty: 100
🕐 Submitted: 2026-04-28
⏰ Disclosed: 2026-06-16 07:16:47
📝 Summary: A vulnerability was discovered in Tor's Conflux OOO queue accounting. The vulnerability could cause the global OOO queue byte counter to remain inflated after a Conflux set was torn down, even though the memory had already been freed. This was due to a lack of accounting updates during the teardown process. No sensitive information was included in the report.
📂 Report JSON File: 3701692
@hackeronereports