CVE-2026-54496 | Zcash Foundation Zebra prior 5.0.0/0.5.0/0.14.0/0.28.0/6.20.0 Scalar Multiplication Gadget incomplete.rs assign_advice integrity check

A vulnerability was found in Zcash Foundation Zebra. It has been rated as critical. This impacts the function assign_advice of the file halo2_gadgets/src/ecc/chip/mul/incomplete.rs of the component Scalar Multiplication Gadget. The manipulation leads to improper validation of integrity check value.

This vulnerability is listed as CVE-2026-54496. The attack may be initiated remotely. There is no available exploit.