Description
Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
Published: 2026-10-30
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service (Memory Exhaustion)
Action: Immediate Upgrade
AI Analysis

Impact

The vulnerability is an out‑of‑memory (OOM) condition in Bitcoin Core that can be triggered by normal or malicious traffic. When the OOM issue is activated the node consumes excessive memory until it cannot allocate further memory, leading to resource exhaustion and a potential denial of service. The impact is a loss of availability for the node, affecting both the local owner and the broader Bitcoin network if the compromised node is part of the consensus or relay infrastructure.

Affected Systems

Bitcoin Core builds released before version 29.5, 30.4, 31.2 and 32.1 are affected. No vendor or product name is listed in the CNA data, but the references indicate this applies to the open‑source Bitcoin Core software distributed via the official project channels.

Risk and Exploitability

The CVSS score is not provided, and EPSS data is unavailable, so the exact likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, through specially crafted network messages or an unusually large transaction stream that forces the node to allocate more memory than it can handle. Even if exploitation is simple, the resulting denial of service could disrupt transaction validation and relay functions, making the risk significant for operators running full nodes.

Generated by OpenCVE AI on October 30, 2026 at 16:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Bitcoin Core to a patched release of 29.5, 30.4, 31.2, or 32.1 or later.
  • Limit the number of peer connections and adjust transaction relay parameters to reduce memory load during high network activity.
  • Apply any additional vendor response or advisory information if published following the disclosure.

Generated by OpenCVE AI on October 30, 2026 at 16:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 30 Oct 2026 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Bitcoincore
Bitcoincore bitcoin Core
Vendors & Products Bitcoincore
Bitcoincore bitcoin Core

Fri, 30 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Title Out-of-Memory Vulnerability in Bitcoin Core Versions Prior to 29.5, 30.4, 31.2, and 32.1
Weaknesses CWE-789

Fri, 30 Oct 2026 15:15:00 +0000

Type Values Removed Values Added
Description Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
References

Subscriptions

Bitcoincore Bitcoin Core
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-30T14:59:10.103Z

Reserved: 2026-10-27T00:00:00.000Z

Link: CVE-2026-117349

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-30T15:16:46.897

Modified: 2026-10-30T15:16:46.897

Link: CVE-2026-117349

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T18:00:15Z

Weaknesses
  • CWE-789

    Memory Allocation with Excessive Size Value