CVE-2019-16930

Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.

• CWE-755

• http://duke.leto.net/2019/10/01/zcash-metadata-leakage-cve-2019-16930.htmlMitigation, Third Party Advisory
• https://github.com/zcash/zcash/commit/c1fbf8ab5d73cff5e1f45236995857c75ba4128dPatch, Third Party Advisory
• https://github.com/zcash/zcash/releases/tag/v2.0.7-3Third Party Advisory
• https://z.cash/support/security/announcements/security-announcement-2019-09-24/Vendor Advisory
• http://duke.leto.net/2019/10/01/zcash-metadata-leakage-cve-2019-16930.htmlMitigation, Third Party Advisory
• https://github.com/zcash/zcash/commit/c1fbf8ab5d73cff5e1f45236995857c75ba4128dPatch, Third Party Advisory
• https://github.com/zcash/zcash/releases/tag/v2.0.7-3Third Party Advisory
• https://z.cash/support/security/announcements/security-announcement-2019-09-24/Vendor Advisory

Published

Sep 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16925Flower 0.9.3 has XSS via the name parameter in an @app.task …6.1
• CVE-2019-16926Flower 0.9.3 has XSS via a crafted worker name. NOTE: The pr…6.1
• CVE-2019-16927Xpdf 4.01.01 has an out-of-bounds write in the vertProfile p…5.5
• CVE-2019-16928Exim 4.92 through 4.92.2 allows remote code execution, a dif…9.8
• CVE-2019-16929Auth0 auth0.net before 6.5.4 has Incorrect Access Control be…7.5
• CVE-2019-1693A vulnerability in the WebVPN service of Cisco Adaptive Secu…6.5
• CVE-2019-16931A stored XSS vulnerability in the Visualizer plugin 3.3.0 fo…6.1
• CVE-2019-16932A blind SSRF vulnerability exists in the Visualizer plugin b…10
• CVE-2019-16935The documentation XML-RPC server in Python through 2.7.16, 3…6.1
• CVE-2019-1694A vulnerability in the TCP processing engine of Cisco Adapti…8.6
• CVE-2019-16941NSA Ghidra through 9.0.4, when experimental mode is enabled,…9.8
• CVE-2019-16942A Polymorphic Typing issue was discovered in FasterXML jacks…9.8