Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/18 7:24 p.m.8 views

CVE-2026-52733 ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a natural or attacker-influenced chain fork can leave stale Sapling and Orchard note-commitment subtree roots in Zebra state. In zebra-state/src/service/nonfinalizedstate/chain.rs, Chain::poptip removed a reverted tip block but did n...

6.5CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder