CVE-2024-52911

HighCVSS 7.5/10Last modified Jul 25, 2026

Description

Bitcoin Core through 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 5, 2026
Last modified
Jul 25, 2026
NVD status
Awaiting Analysis

Related CVEs from 2024

CVE-2024-529127.5Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connectiCVE-2024-529135.3In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requeCVE-2024-529147.5In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.CVE-2024-529157.5Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.CVE-2024-529167.5Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.CVE-2024-529176.5Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.CVE-2024-529186.5Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and application crash) viaCVE-2024-529196.5Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messCVE-2024-52927.8D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackerCVE-2024-529207.5Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.CVE-2024-529215.3In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.CVE-2024-529226.5In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an an
CVE-2024-52911: High severity, CVSS 7.5 | Vulnix