Bitcoin Core vulnerabilities

CVE-2019-25220 [HIGH] CWE-770 CVE-2019-25220: Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

CVE-2024-52916 [HIGH] CWE-770 CVE-2024-52916: Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.

CVE-2024-52915 [HIGH] CWE-770 CVE-2024-52915: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.

CVE-2024-52920 [HIGH] CWE-770 CVE-2024-52920: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.

CVE-2012-4684 [HIGH] CWE-399 CVE-2012-4684: The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character represe The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.

CVE-2015-3641 [HIGH] CVE-2015-3641: bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled funct bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.

CVE-2024-52922 [MEDIUM] CVE-2024-52922: In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification.

CVE-2013-2292 [HIGH] CWE-399 CVE-2013-2292: bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (elect bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes.

CVE-2013-3220 [MEDIUM] CWE-399 CVE-2013-3220: bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x bef bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a la

CVE-2017-18350 [MEDIUM] CWE-120 CVE-2017-18350: bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

CVE-2018-20586 [MEDIUM] CWE-116 CVE-2018-20586: bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.

CVE-2013-3219 [MEDIUM] CWE-264 CVE-2013-3219: bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allow bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions.

CVE-2013-2272 [MEDIUM] CWE-200 CVE-2013-2272: The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin tra

CVE-2024-52917 [MEDIUM] CWE-770 CVE-2024-52917: Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of r Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.

CVE-2024-55563 [MEDIUM] CVE-2024-55563: Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a relat Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions.

CVE-2025-46598 [MEDIUM] CWE-405 CVE-2025-46598: Bitcoin Core through 29.0 allows a denial of service via a crafted transaction. Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.

CVE-2024-52913 [MEDIUM] CWE-770 CVE-2024-52913: In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed t In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled.

CVE-2018-20587 [MEDIUM] CVE-2018-20587: Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots201812 Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.

CVE-2024-52921 [MEDIUM] CWE-862 CVE-2024-52921: In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutate In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.

CVE-2013-4165 [MEDIUM] CWE-200 CVE-2013-4165: The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentic The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.