CVE-2026-109363: Zcash Tx Deserialize Missing Version Branchid Checkcve-2026-109363-zcash-tx-deserialize-missing-version-branchid-check
Transaction deserialization via zcash_primitives Transaction::read accepts wire bytes selected by nConsensusBranchId without validating that the parsed transaction version is compatible with that branch ID. A transaction version introduced at a later network upgrade (e.g. V6 at NU6.3) parsed with an older/unmapped branch ID can select bundle encodings the co