CVE-2026-117350

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 29.5 Bitcoin Core versions prior to 30.4 Bitcoin Core versions prior to 31.2 Bitcoin Core versions prior to 32.1

Description Bitcoin Core nodes running on Windows, macOS, and BSD are subject to a remote memory-exhaustion issue. A malicious connected peer can send TCP urgent (out-of-band) data to bypass receive backpressure, which triggers unbounded queued data and leads to a node crash due to out-of-memory (OOM) conditions. Linux nodes are not affected by this issue.

Recommendations Upgrade to version 29.5. Upgrade to version 30.4. Upgrade to version 31.2. Upgrade to version 32.1. Restrict untrusted peer access where operationally feasible.