Executive brief
Bitcoin Core, the primary software used to operate the Bitcoin network, contains a security vulnerability in its script interpreter. An attacker could potentially exploit this flaw to cause a remote crash of the software, leading to a denial-of-service for the affected node. This could disrupt transaction processing and network stability for operators running affected versions.
Technical details
Bitcoin Core is vulnerable to a remote crash within its script interpreter component. The vulnerability is classified under improper access control (CWE-284) and allows for a remote, unauthenticated attack over the network with low complexity. While initial descriptions were non-disclosed, associated project documentation identifies the issue as a 'Script Interpreter Remote Crash.' Successful exploitation results in a denial-of-service (DoS) condition for the node. The issue affects a wide range of versions from 0.14 through the 28.x branch.
Affected products
- Bitcoin Bitcoin Core 0.14 through 28.x
Timeline
- 2026-05-05: disclosed: Initial disclosure of CVE-2024-52911
- 2026-05-05: advisory: Bitcoin Core project published advisory details regarding the script interpreter crash