This vulnerability is an integer overflow present in Bitcoin Core versions 0.13.0 through 29.x. It can cause a holder of a crafted transaction to manipulate counters or indices, potentially resulting in corrupted transaction values, compromised chain validation, or incorrect balance calculations. The weakness corresponds to CWE-190, which is an arithmetic overflow that can lead to data integrity issues.

Bitcoin Core software is affected. The vulnerability exists in releases from version 0.13.0 up to and including 29.x. Any system running these versions is at risk until a newer release is applied.

The CVSS score of 7.5 indicates a high impact on the affected network, while an EPSS score below 1 percent suggests a low likelihood of widespread exploitation. The vulnerability is not recorded in the CISA KEV catalog, meaning no publicly known exploits are available at this time. The likely attack vector is through a malicious transaction that, when processed by a vulnerable node, triggers the integer wrap, allowing an attacker to alter values used in the consensus process. As no active exploits are documented, the risk remains primarily theoretical until confirmed by the community.