PT-2026-37224 · Unknown · Bitcoin Core

Published 2026-05-05 · Updated 2026-05-27 · CVE-2024-52911

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions 0.14 through 28.x

Description A high-severity memory safety issue exists in the script validation engine of the main node software. This use-after-free flaw—a type of memory corruption that occurs when a program continues to use a pointer after it has been freed—could allow an attacker with sufficient proof-of-work to remotely crash other nodes or potentially execute arbitrary code on them. Exploitation requires the use of specially crafted invalid blocks, making the attack costly in practice. It is estimated that approximately 43% of nodes worldwide remain affected.

Recommendations Update Bitcoin Core to version 29.0.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-52911

Affected Products

Bitcoin Core

References · 51

• https://nvd.nist.gov/vuln/detail/CVE-2024-52911 · Security Note
• https://twitter.com/TheCurrencyA/status/2052266535821910396 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2052225910322127138 · Twitter Post
• https://twitter.com/akamadubenneth/status/2051964267931357505 · Twitter Post
• https://twitter.com/ggmania/status/2051781944363405365 · Twitter Post
• https://twitter.com/ClaudioNeoIA/status/2058928359321506206 · Twitter Post
• https://twitter.com/ClaudioNeoIA/status/2059653457556955242 · Twitter Post
• https://twitter.com/0xzxcom/status/2051892741408194995 · Twitter Post
• https://twitter.com/infoflowcloud/status/2051760569632293345 · Twitter Post
• https://twitter.com/stacker_news/status/2051814211207012370 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1t73hwm/top_10_trending_cves_08052026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1t80prx/top_10_trending_cves_09052026 · Reddit Post
• https://twitter.com/0xSalazar/status/2052284568871293092 · Twitter Post
• https://twitter.com/integ_sec/status/2055623044517769610 · Twitter Post
• https://twitter.com/chaindailyio/status/2052025749985439764 · Twitter Post