CVE-2026-34067

Katalog CVE

CVSS 6.5 · Medium EPSS 0,44%

Kerentanan Reachable Assertion pada nimiq proof-of-stake. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryTreeProof::verify` panics on a malformed proof where `history.len() != positions.len()` due to `assert_eq!(history.len(), positions.len())`. The proof object is derived from untrusted p2p responses (`ResponseTransactionsProof.proof`) and is therefore attacker-controlled at the network boundary until validated. A malicious peer could trigger a crash by returning a crafted inclusion proof with a length mismatch. The patch for this vulnerability is included as part of v1.3.0. No known workarounds are available.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm patch · advisory vendor
• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a patch
• https://github.com/nimiq/core-rs-albatross/pull/3659 issue tracking · patch
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0 release notes