Nimiq Transaction History Tree Proof Length Mismatch Panic Vulnerability

A vulnerability in the Nimiq Transaction package, specifically in versions through 1.2.2, allows a malicious peer to cause a panic by sending a crafted inclusion proof with a length mismatch. This issue arises in the `HistoryTreeProof::verify` method, which improperly validates proof lengths, leading to a crash when the lengths do not match. The vulnerability exists because the proof is derived from untrusted peer-to-peer responses, leaving it open to manipulation at the network boundary until it is validated.

Impact

Exploitation of this vulnerability causes a panic in the `HistoryTreeProof::verify` method, disrupting the application's normal operation and potentially leading to a denial of service.

Remediation

Users can upgrade to Nimiq Transaction version 1.3.0 or later to address this vulnerability.