Improper Check for Unusual or Exceptional Conditions Affecting zebrad package, versions <4.5.0
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Improper Check for Unusual or Exceptional Conditions vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-RUST-ZEBRAD-17808052
- published3 Jul 2026
- disclosed2 Jul 2026
- creditUnknown
Introduced: 2 Jul 2026
New CVE NOT AVAILABLE CWE-248 (opens in a new tab)How to fix?
Upgrade zebrad to version 4.5.0 or higher.
Overview
zebrad is a The Zcash Foundation's independent, consensus-compatible implementation of a Zcash node
Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions through the z_listunifiedreceivers RPC handler when processing a structurally valid Unified Address containing a Sapling receiver with invalid cryptographic data. An attacker can cause the node process to terminate by sending a specially crafted authenticated RPC request. This is only exploitable if the RPC server is enabled and the attacker can authenticate to the RPC endpoint.