CVE-2026-117350
Low risk· EPSS 6%Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Bitcoin Core prior to 29.5, 30.4, 31.2, and 32.1 is vulnerable to an OOM (out-of-memory) issue. The description does not provide further technical details.
Risk Assessment
Could lead to a crash or halt of a Bitcoin Core node, causing service unavailability. Depending on context, it may be exploited for remote denial of service.
Recommendation
Update Bitcoin Core to version 29.5, 30.4, 31.2, 32.1, or later, which contain the fix for this issue.
Other vulnerabilities in Bitcoin Core
See all- CVE-2026-117349Medium
Bitcoin Core prior to versions 29.5, 30.4, 31.2, and 32.1 is vulnerable to an out-of-memory (OOM) issue. The flaw can cause node malfunction due to insufficient memory resources.
- CVE-2026-117346Low risk· EPSS 10%
Bitcoin Core through version 31.1 is vulnerable to a Denial of Service attack via undo files that have no size limit. The lack of size restriction may allow resource exhaustion and node destabilization.
- CVE-2024-52911High
Bitcoin Core through version 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14.
- CVE-2023-37192High
Memory management and protection issues in Bitcoin Core v22 allow attackers to modify the stored sending address within the app's memory, potentially enabling them to redirect Bitcoin transactions to wallets of their own choosing.
- CVE-2023-33297High
Bitcoin Core before version 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) due to inefficient draining of the inventory-to-send queue, as exploited in the wild in May 2023.
Original NVD description (English source)
Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS