CVE-2026-117349
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Bitcoin Core prior to versions 29.5, 30.4, 31.2, and 32.1 is vulnerable to an out-of-memory (OOM) issue. The flaw can cause node malfunction due to insufficient memory resources.
Risk Assessment
Organizations running Bitcoin Core nodes on vulnerable versions may experience crashes or service instability due to memory exhaustion, potentially disrupting cryptocurrency infrastructure operations.
Recommendation
Update Bitcoin Core to version 29.5, 30.4, 31.2, or 32.1 (or later) to eliminate the OOM vulnerability.
Other vulnerabilities in Bitcoin Core
See all- CVE-2026-117346Low risk· EPSS 10%
Bitcoin Core through version 31.1 is vulnerable to a Denial of Service attack via undo files that have no size limit. The lack of size restriction may allow resource exhaustion and node destabilization.
- CVE-2026-117350Low risk· EPSS 6%
Bitcoin Core prior to 29.5, 30.4, 31.2, and 32.1 is vulnerable to an OOM (out-of-memory) issue. The description does not provide further technical details.
- CVE-2024-52911High
Bitcoin Core through version 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14.
- CVE-2023-37192High
Memory management and protection issues in Bitcoin Core v22 allow attackers to modify the stored sending address within the app's memory, potentially enabling them to redirect Bitcoin transactions to wallets of their own choosing.
- CVE-2023-33297High
Bitcoin Core before version 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) due to inefficient draining of the inventory-to-send queue, as exploited in the wild in May 2023.
Original NVD description (English source)
Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS