CVE-2024-52917

Summary

CVE-2024-52917 is a vulnerability affecting Bitcoin Core versions prior to 22.0. This issue involves an infinite loop in the miniupnp component, leading the software to allocate memory based on random data received over the network, such as large M-SEARCH replies from fraudulent UPnP devices. The infinite loop results in a denial-of-service condition and potentially unlimited memory consumption, posing a significant risk to Bitcoin Core users. Successful exploitation could allow an attacker to cause resource exhaustion, potentially leading to network congestion or even crashes. Users are advised to upgrade to the latest version of Bitcoin Core to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.