Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-104430

Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using low-threshold multisig redeem scripts so that a block zcashd accepts exceeds Zebra's inflated MAX_BLOCK_SIGOPS count, causing Zebra nodes to reject it and stall off the chain.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZcashFoundation zebra

Default version status: unaffected

  • 4.5.0 to < 4.5.1affected
  • 4.5.1unaffected
pkg:cargo/zebrad

ZcashFoundation zebra

Default version status: unaffected

  • 7.0.0 to < 7.0.1affected
  • 7.0.1unaffected
pkg:cargo/zebra-script

References