Bitcoin Core

CVE-2025-62860: Bitcoin Core <28.3, 29.2, 30.0 incorrectly whitelists inbound Tor peers, bypassing DoS limits and privacy mitigations if Tor proxy IP matches -whitelist range.

CVE-2025-62859: Bitcoin Core <29.2, 30.0 vulnerable to block processing stalls via witness malleation in compact blocks; malicious peers can trigger 10-minute timeouts.

CVE-2025-62861 (High): Bitcoin Core 28.0-28.2, 29.0-29.1 mempool inconsistency; TRUC sibling eviction during reorg halts block template creation; patched in v30.0.

CVE-2026-117350 (Medium): Non-Linux Bitcoin Core nodes vulnerable to memory exhaustion via TCP urgent data; affects select()-based platforms; patched in v29.5, 30.4, 31.2, 32.1.

Bitcoin Core 30.4 released with bug fixes; node operators should update for security and stability improvements.

Bitcoin Core 31.2 released with bug fixes; node operators should update for security and stability improvements.

CVE-2026-117346 (Low): Bitcoin Core undo file overflow allows miners to corrupt other nodes' data under extreme reorg conditions; impractical exploit; 32-bit and FAT32 systems remain affected.

CVE-2026-117349 (Medium): Bitcoin Core paused pre-BIP31 peers allow unbounded memory growth in announcement queue; fixed in v29.5, 30.4, 31.2, 32.1.

Bitcoin Core 29.5 released with bug fixes; node operators should update for security and stability improvements.

Bitcoin Core 32.1 released with bug fixes; node operators should update for security and stability improvements.