Bitcoin Core versions through 29.0 are vulnerable to a denial of service condition caused by a specially crafted transaction. The flaw allows an attacker to create a transaction that, when processed by the node, can consume excessive resources or trigger internal errors, resulting in the node becoming unresponsive or unable to process further work. The weakness is classified as CWE-405, indicating a failure to validate input or guard against erroneous conditions, which in this case leads to lost availability of the affected service.

The vulnerability affects Bitcoin Core software on all platforms that run the affected builds. All releases up to and including version 29.0 are susceptible; newer releases are not listed as affected in the advisories. Users running these versions under any operating system are at risk.

The CVSS score of 5.3 indicates a moderate severity, while the EPSS score of less than 1% suggests that exploitation is considered unlikely under current threat conditions. The vulnerability is not in the CISA Known Exploited Vulnerabilities catalog. Attackers would need to construct a specific transaction and broadcast it to a target node, which may require some level of network access to the node or a broader network presence. The impact is limited to the faulty node, but repeated activations could degrade network performance if many nodes are affected.