Description
Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.
Medium · 6.5
CVE-2024-52917
EUVD-2024-45967GHSA-fx2f-v4hx-q8h6
Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e…
Published Nov 18, 2024 · Updated Nov 18, 2024 · Assigned by mitre