Description
Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
Published: 2026-10-30
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch ASAP
AI Analysis

Impact

The vulnerability is an out‑of‑memory condition that can be triggered when Bitcoin Core processes data that exhausts available memory, causing the node to crash or become unresponsive. The fallout is a loss of service availability for the affected node, potentially affecting its peers and the broader network, though no confidentiality or integrity breaches are described. The weakness is a classic uncontrolled resource allocation problem.

Affected Systems

Bitcoin Core software versions prior to 29.5, 30.4, 31.2, and 32.1 are impacted. Any instance running those releases is at risk.

Risk and Exploitability

No EPSS or CVSS scores are supplied, and the vulnerability is not listed in the CISA KEV catalog. Because the issue involves memory exhaustion, it can potentially be triggered remotely by an attacker sending crafted data or excessive traffic to a vulnerable node. The lack of exploitation statistics suggests a moderate risk that should be treated as a serious denial of service threat until mitigated.

Generated by OpenCVE AI on October 30, 2026 at 15:26 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Bitcoin Core to the first release following 32.1, which contains the OOM fix.
  • If an upgrade is not immediately possible, implement network traffic controls or rate limiting on the node to reduce the likelihood of memory exhaustion from malicious or malformed input.
  • Restart the node promptly if a crash is observed, and monitor memory usage to detect attempts to exhaust resources.

Generated by OpenCVE AI on October 30, 2026 at 15:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 30 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
Title Denial of Service via OOM in Bitcoin Core
Weaknesses CWE-687

Fri, 30 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-30T14:05:22.550Z

Reserved: 2026-10-27T00:00:00.000Z

Link: CVE-2026-117350

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-30T14:16:39.733

Modified: 2026-10-30T14:16:39.733

Link: CVE-2026-117350

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T15:30:16Z

Weaknesses
  • CWE-687

    Function Call With Incorrectly Specified Argument Value