CVE-2019-16930: Z.cash Zcash

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.

Affected products

• Z.cash Zcash: before 2.0.7-3 (fixed in 2.0.7-3)

Published 2019-09-28. Last modified 2026-06-17.