PT-2026-38618 · Zebra · Zebra
Sangsoo-Osec
·
Published
2026-05-07
·
Updated
2026-05-14
·
CVE-2026-44497
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
Zebra versions 4.3.1 through 4.3.1
Description
Insufficient error handling during sighash computation can lead to consensus divergence. When an invalid sighash type is encountered, the system fails to return an error, leaving the input sighash buffer untouched. If a previous signature validation left a valid sighash in the buffer, an invalid hash-type may be incorrectly accepted. This occurs because the foreign function interface (FFI) bridge only writes to the C++ sighash buffer when the Rust callback returns
Some, but the C++ checker reads the buffer unconditionally, causing the failure signal to be lost. An attacker can exploit this by constructing a transparent output that executes a valid OP CHECKSIGVERIFY followed by an OP CHECKSIG with an undefined hash type, potentially inducing network partitioning, service disruption, and double-spend attacks.Recommendations
Update to version 4.4.0.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zebra