BI
Vendor
Bitcoin
87
CVEs
0
On KEV
0
New 30D
Products
BC9.8
Bitcoin Core
Bitcoin
56 CVEs0 on KEV0 new
BI7.5
Bitcoin-qt
Bitcoin
10 CVEs0 on KEV0 new
BI7.5
Bitcoind
Bitcoin
8 CVEs0 on KEV0 new
WX–
Wxbitcoin
Bitcoin
8 CVEs0 on KEV0 new
BI9.8
Bitcoin
Bitcoin
4 CVEs0 on KEV0 new
QI–
Qitcoin-qt
Bitcoin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-46597 | BC Bitcoin Core Bitcoin | 7.5 | Mar 20 | Bitcoin Core 0.13.0 through 29.x has an integer overflow |
| CVE-2025-46598 | BC Bitcoin Core Bitcoin | 5.3 | Mar 20 | Bitcoin Core through 29.0 allows a denial of service via a crafted transaction |
| CVE-2025-54605 | BC Bitcoin Core Bitcoin | 7.5 | Oct 28 | Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2) |
| CVE-2025-54604 | BC Bitcoin Core Bitcoin | 7.5 | Oct 28 | Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2) |
| CVE-2024-55563 | BC Bitcoin Core Bitcoin | 5.3 | Dec 9 | Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913 |
| CVE-2024-52918 | BC Bitcoin Core Bitcoin | 6.5 | Nov 18 | Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) via a BIP21 r parameter for a URL that has… |
| CVE-2024-52917 | BC Bitcoin Core Bitcoin | 6.5 | Nov 18 | Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake… |
| CVE-2024-52916 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers |
| CVE-2024-52915 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message |
| CVE-2024-52914 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction |
| CVE-2024-52913 | BC Bitcoin Core Bitcoin | 5.3 | Nov 18 | In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled |
| CVE-2024-52912 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug |
| CVE-2019-25220 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack)… |
| CVE-2015-20111 | BC Bitcoin Core Bitcoin | 9.8 | Nov 18 | miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a… |
| CVE-2024-52922 | BC Bitcoin Core Bitcoin | 6.5 | Nov 18 | In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of… |
| CVE-2024-52921 | BC Bitcoin Core Bitcoin | 5.3 | Nov 18 | In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block |
| CVE-2024-52920 | BC Bitcoin Core Bitcoin | 7.5 | Nov 18 | Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message |
| CVE-2024-52919 | BC Bitcoin Core Bitcoin | 6.5 | Nov 18 | Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages |
| CVE-2024-35202 | BC Bitcoin Core Bitcoin | 7.5 | Oct 10 | Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message… |
| CVE-2023-50428 | BC Bitcoin Core Bitcoin | 5.3 | Dec 9 | In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as… |
| CVE-2023-37192 | BC Bitcoin Core Bitcoin | 7.5 | Jul 7 | Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect… |
| CVE-2023-33297 | BC Bitcoin Core Bitcoin | 7.5 | May 22 | Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is… |
| CVE-2021-31876 | BI Bitcoin Bitcoin | 6.5 | May 13 | Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a… |
| CVE-2021-3401 | BI Bitcoin Bitcoin | 9.8 | Feb 4 | Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt… |
| CVE-2021-3195 | BC Bitcoin Core Bitcoin | 7.5 | Jan 26 | bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call |
| CVE-2020-14198 | BC Bitcoin Core Bitcoin | 7.5 | Sep 10 | Bitcoin Core 0.20.0 allows remote denial of service |
| CVE-2018-17145 | BC Bitcoin Core Bitcoin | 7.5 | Sep 10 | Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka… |
| CVE-2017-12842 | BC Bitcoin Core Bitcoin | 7.5 | Mar 16 | Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur |
| CVE-2018-20586 | BC Bitcoin Core Bitcoin | 5.3 | Mar 12 | bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call |
| CVE-2017-18350 | BC Bitcoin Core Bitcoin | 5.9 | Mar 12 | bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used |
| CVE-2015-3641 | BC Bitcoin Core Bitcoin | 7.5 | Mar 12 | bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack |
| CVE-2019-15947 | BC Bitcoin Core Bitcoin | 7.5 | Sep 5 | In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory |
| CVE-2018-20587 | BC Bitcoin Core Bitcoin | 5.5 | Feb 11 | Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control |
| CVE-2018-17144 | BC Bitcoin Core Bitcoin | 7.5 | Sep 19 | Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service… |
| CVE-2016-10725 | BC Bitcoin Core Bitcoin | 7.5 | Jul 5 | In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong… |
| CVE-2016-10724 | BC Bitcoin Core Bitcoin | 7.5 | Jul 5 | Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message… |
| CVE-2017-9230 | BI Bitcoin Bitcoin | 7.5 | May 24 | The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same… |
| CVE-2013-5700 | BI Bitcoin-qt Bitcoin | – | Sep 10 | The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a… |
| CVE-2013-4627 | BC Bitcoin Core Bitcoin | – | Aug 2 | Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a denial of service (memory consumption) via a large amount of tx message data |
| CVE-2013-4165 | BC Bitcoin Core Bitcoin | – | Aug 2 | The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which… |
| CVE-2013-3220 | BC Bitcoin Core Bitcoin | – | Aug 2 | bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size… |
| CVE-2013-3219 | BC Bitcoin Core Bitcoin | – | Aug 2 | bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct… |
| CVE-2013-2293 | BC Bitcoin Core Bitcoin | – | Mar 12 | The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which… |
| CVE-2013-2292 | BI Bitcoind Bitcoin | – | Mar 12 | bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin… |
| CVE-2013-2273 | BI Bitcoind Bitcoin | – | Mar 12 | bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote… |
| CVE-2013-2272 | BI Bitcoind Bitcoin | – | Mar 12 | The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through… |
| CVE-2012-4684 | BI Bitcoind Bitcoin | – | Mar 12 | The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature,… |
| CVE-2012-4683 | BC Bitcoin Core Bitcoin | – | Sep 14 | Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4682 |
| CVE-2012-4682 | BC Bitcoin Core Bitcoin | – | Sep 14 | Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-4683 |
| CVE-2012-3789 | BC Bitcoin Core Bitcoin | – | Aug 6 | Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before 0.6.3rc1 allows remote attackers to cause… |
| CVE-2012-2459 | BC Bitcoin Core Bitcoin | – | Aug 6 | Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows remote attackers to cause a denial of… |
| CVE-2012-1910 | BI Bitcoin-qt Bitcoin | – | Aug 6 | Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which… |
| CVE-2012-1909 | WX Wxbitcoin Bitcoin | – | Aug 6 | The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which… |
| CVE-2011-4447 | WX Wxbitcoin Bitcoin | – | Aug 6 | The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows… |
| CVE-2010-5141 | BC Bitcoin Core Bitcoin | – | Aug 6 | wxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend bitcoins owned by other users via… |
| CVE-2010-5140 | WX Wxbitcoin Bitcoin | – | Aug 6 | wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a… |
| CVE-2010-5139 | WX Wxbitcoin Bitcoin | – | Aug 6 | Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin… |
| CVE-2010-5138 | WX Wxbitcoin Bitcoin | – | Aug 6 | wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction containing multiple OP_CHECKSIG script opcodes |
| CVE-2010-5137 | BC Bitcoin Core Bitcoin | – | Aug 6 | wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction containing an OP_LSHIFT script opcode |