What’s Vulnerable › Vulnerabilities

CVE-2019-11636

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-01 · updated 2026-06-17
• Weakness: CWE-254

Description

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.

Affected products

• Z.Cash Zcash: from 2.0.0 through 2.0.4; 2.0.5-rc1

References

• https://github.com/zcash/zcash/issues/3955
• https://saplingwoodchipper.github.io
• https://twitter.com/dukeleto/status/1120467430118232066
• https://github.com/zcash/zcash/issues/3955
• https://saplingwoodchipper.github.io
• https://twitter.com/dukeleto/status/1120467430118232066

Get alerted when CVE-2019-11636 or the next vulnerability affects your stack