GHSA-WW9Q-8R59-XV46 Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

🗓️ 06 Jul 2026 21:23:41Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Soundness flaw in halo2_gadgets scalar multiplication enables under-constrained base and double-spends in Orchard Action.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-54496	17 Jul 202616:59	–	attackerkb
Circl	CVE-2026-54496	6 Jul 202621:38	–	circl
CVE	CVE-2026-54496	17 Jul 202616:59	–	cve
Cvelist	CVE-2026-54496 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness	17 Jul 202616:59	–	cvelist
EUVD	EUVD-2026-45228	17 Jul 202616:59	–	euvd
Github Security Blog	Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness	6 Jul 202621:23	–	github
NVD	CVE-2026-54496	17 Jul 202617:17	–	nvd
Positive Technologies	PT-2026-56057	6 Jul 202600:00	–	ptsecurity
vulnersOsv	ledger-zcash (>=0.3.0, <=0.5.0), zcash-hsmbuilder (>=0.2.0, <=0.3.0) +3 more potentially affected by CVE-2026-54496 via zcash_primitives (0.5.0)	6 Jul 202621:23	–	vulnersosv
Vulnrichment	CVE-2026-54496 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness	17 Jul 202616:59	–	vulnrichment