BC
Product
Bitcoin Core
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 21Medium 12Low 0
Watch
Add Bitcoin Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-52917 | 6.5 | Nov 18 | Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake… Affected: before 22.0 |
| CVE-2024-52922 | 6.5 | Nov 18 | In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of… Affected: before 25.1 |
| CVE-2024-52919 | 6.5 | Nov 18 | Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages Affected: before 22.0 |
| CVE-2024-52918 | 6.5 | Nov 18 | Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via a BIP21 r parameter for a URL that has… Affected: before 0.20.0 |
| CVE-2017-18350 | 5.9 | Mar 12 | bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used Affected: before 0.15.1 |
| CVE-2018-20587 | 5.5 | Feb 11 | Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control Affected: 0.12.0 through 0.17.1 |
| CVE-2025-46598 | 5.3 | Mar 20 | Bitcoin Core through 29.0 allows a denial of service via a crafted transaction Affected: before 0.30.0 |
| CVE-2024-55563 | 5.3 | Dec 9 | Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913 Affected: through 27.2 |
| CVE-2024-52913 | 5.3 | Nov 18 | In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled Affected: before 0.21.0 |
| CVE-2024-52921 | 5.3 | Nov 18 | In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block Affected: before 25.0 |
| CVE-2023-50428 | 5.3 | Dec 9 | In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as… Affected: 0.9 through 26.0 |
| CVE-2018-20586 | 5.3 | Mar 12 | bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call Affected: 0.12.0; 0.12.0; 0.12.0; 0.12.0; 0.12.0; 0.12.1; +34 more |
Showing 12