PT-2026-34554 · Unknown · Nimiq-Transaction

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-34067

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions nimiq-transaction versions prior to 1.3.0

Description The HistoryTreeProof::verify() function panics when processing a malformed proof where history.len() does not equal positions.len(), caused by an assert eq! check. Because the proof object is derived from untrusted p2p responses via ResponseTransactionsProof.proof, it is attacker-controlled at the network boundary. A malicious peer can trigger a system crash by providing a crafted inclusion proof with a length mismatch.

Recommendations Update to version 1.3.0.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2026-34067

GHSA-264V-M8FM-76JM

Affected Products

Nimiq-Transaction

References · 8

• https://github.com/nimiq/core-rs-albatross/pull/3659 · Patch
• https://github.com/nimiq/core-rs-albatross/commit/6ff0800e8e031363e787c827d8d033e5694e4e6a · Patch
• https://github.com/nimiq/core-rs-albatross/security/advisories/GHSA-264v-m8fm-76jm · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-264v-m8fm-76jm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34067 · Security Note
• https://github.com/nimiq/core-rs-albatross · Note
• https://github.com/nimiq/core-rs-albatross/releases/tag/v1.3.0 · Note
• https://twitter.com/CVEnew/status/2047359954760163724 · Twitter Post