Description (CNA)
Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could have resulted in the draining of user funds from the Sprout pool. It was sometimes not verifying Sprout proofs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zcash / zcashd | affected 0 before 6.12.0 |
CWE
CWE-358
References
- https://github.com/zcash/zcash/releases/tag/v6.12.0
- https://github.com/zcash/zcash/commit/db969c63f48f0f9fc518112ed0b7ace1af78b9d0
ADP enrichment
No English description supplied.
No references supplied.