Bitcoin Core vulnerabilities

• bitcoin core Bitcoin Core through 29.0 allows a denial of service via a crafted transaction. CVE-2025-46598 5.3 MediumMarch 20, 2026
• bitcoin core Bitcoin Core 0.13.0 through 29.x has an integer overflow. CVE-2025-46597 7.5 HighMarch 20, 2026
• bitcoin core Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2). CVE-2025-54605 7.5 HighOctober 28, 2025
• bitcoin core Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2). CVE-2025-54604 7.5 HighOctober 28, 2025
• bitcoin core Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a... CVE-2024-55563 5.3 MediumDecember 9, 2024
• bitcoin core In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block,... CVE-2024-52922 6.5 MediumNovember 18, 2024
• bitcoin core In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a... CVE-2024-52921 5.3 MediumNovember 18, 2024
• bitcoin core Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop)... CVE-2024-52920 7.5 HighNovember 18, 2024
• bitcoin core Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure... CVE-2024-52919 6.5 MediumNovember 18, 2024
• bitcoin core Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service ... CVE-2024-52918 6.5 MediumNovember 18, 2024
• bitcoin core Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis... CVE-2024-52917 6.5 MediumNovember 18, 2024
• bitcoin core Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood... CVE-2024-52916 7.5 HighNovember 18, 2024
• bitcoin core Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory... CVE-2024-52915 7.5 HighNovember 18, 2024
• bitcoin core In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a... CVE-2024-52914 7.5 HighNovember 18, 2024
• bitcoin core In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific... CVE-2024-52913 5.3 MediumNovember 18, 2024
• bitcoin core Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow ... CVE-2024-52912 7.5 HighNovember 18, 2024
• bitcoin core Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash)... CVE-2019-25220 7.5 HighNovember 18, 2024
• bitcoin core miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for... CVE-2015-20111 9.8 CriticalNovember 18, 2024
• bitcoin, bitcoin core +1 more Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message... CVE-2024-35202 7.5 HighOctober 10, 2024
• bitcoin core, bitcoinknots bitcoin knots +1 more In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits... CVE-2023-50428 Disputed 5.3 MediumDecember 9, 2023
• bitcoin core Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored... CVE-2023-37192 7.5 HighJuly 6, 2023
• bitcoin core Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of... CVE-2023-33297 7.5 HighMay 22, 2023
• bitcoin core bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g.,... CVE-2021-3195 Fix availableDisputed 7.5 HighJanuary 21, 2021
• bitcoin core Bitcoin Core 0.20.0 allows remote denial of service. CVE-2020-14198 7.5 HighSeptember 10, 2020
• bitcoin core, bitcoinknots bitcoin knots, bcoin +3 more +5 more Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145) CVE-2018-17145 Fix available 7.5 HighSeptember 10, 2020
• bitcoin core Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment... CVE-2017-12842 7.5 HighMarch 16, 2020
• bitcoin core bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled... CVE-2015-3641 7.5 HighMarch 12, 2020
• bitcoin core bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via... CVE-2018-20586 5.3 MediumMarch 12, 2020
• bitcoin core bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker... CVE-2017-18350 5.9 MediumMarch 12, 2020
• bitcoin core In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it... CVE-2019-15947 7.5 HighSeptember 5, 2019
• bitcoin core, bitcoinknots bitcoin knots +1 more Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1... CVE-2018-20587 5.5 MediumFebruary 11, 2019
• bitcoin core, bitcoinknots bitcoin knots +1 more Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin... CVE-2018-17144 Public exploitFix available 7.5 HighSeptember 19, 2018
• bitcoin core, bitcoin-qt, bitcoind +2 more In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" ... CVE-2016-10725 7.5 HighJuly 5, 2018
• bitcoin core, bitcoin-qt, bitcoind +2 more Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote... CVE-2016-10724 7.5 HighJuly 5, 2018
• bitcoin bitcoin-qt, core +1 more The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote... CVE-2013-5700 5.0 MediumSeptember 10, 2013
• bitcoin core Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a... CVE-2013-4627 5.0 MediumAugust 1, 2013
• bitcoin core The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about... CVE-2013-4165 4.3 MediumAugust 1, 2013
• bitcoin bitcoin-qt, bitcoind, core +1 more +3 more bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x... CVE-2013-3220 6.4 MediumAugust 1, 2013
• bitcoin core bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which... CVE-2013-3219 5.0 MediumAugust 1, 2013
• bitcoin bitcoin-qt, bitcoind, core +2 more The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies... CVE-2013-2293 5.0 MediumMarch 12, 2013
• bitcoin bitcoin-qt, bitcoind, core +2 more bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service ... CVE-2013-2292 7.8 HighMarch 12, 2013
• bitcoin bitcoin-qt, bitcoind, core +2 more bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1... CVE-2013-2273 5.0 MediumMarch 12, 2013
• bitcoin bitcoin-qt, bitcoind, core +2 more The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin... CVE-2013-2272 5.0 MediumMarch 12, 2013
• bitcoin bitcoin-qt, bitcoind, core +1 more +3 more The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character... CVE-2012-4684 7.8 HighMarch 12, 2013
• bitcoin core Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of... CVE-2012-4683 5.0 MediumSeptember 14, 2012
• bitcoin core Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of... CVE-2012-4682 5.0 MediumSeptember 14, 2012
• bitcoin core Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6... CVE-2012-3789 5.0 MediumAugust 6, 2012
• bitcoin core Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x... CVE-2012-2459 Public exploit 5.0 MediumAugust 6, 2012
• bitcoin bitcoin-qt, core +1 more Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before... CVE-2012-1910 7.5 HighAugust 6, 2012
• bitcoin wxbitcoin, core +1 more The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs... CVE-2012-1909 5.0 MediumAugust 6, 2012
• Show olderLoading…