{"id":"CVE-2026-117349","kind":"vulnerability","aliases":["CVE-2026-117349"],"related":[],"title":"Bitcoin Core: out-of-memory bug can crash the node before 29.5","description":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","summary":"Bitcoin Core versions before 29.5, 30.4, 31.2 and 32.1 can run out of memory. The sources do not say what input triggers it or whether an attacker can exploit it beyond crashing the node.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bitcoin-core","other","self-hosted"],"not_affected_if":[],"how_to_check":"- Check the installed Bitcoin Core version with `bitcoind --version`\n- Compare it against the fixed releases 29.5, 30.4, 31.2 and 32.1\n- Exposure beyond this is unknown","fix":"- Upgrade Bitcoin Core to `29.5`, `30.4`, `31.2` or `32.1` on the matching release line","status":"open","published_at":"2026-10-30T15:16:46+00:00","first_seen_at":"2026-10-30T15:31:09+00:00","triaged_at":"2026-10-30T15:33:55+00:00","updated_at":"2026-10-30T15:33:55+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-30T15:33:55Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Bitcoin Core to `29.5`, `30.4`, `31.2` or `32.1` on the matching release line","reach":"unknown","title":"Bitcoin Core: out-of-memory bug can crash the node before 29.5","impact":"low","summary":"Bitcoin Core versions before 29.5, 30.4, 31.2 and 32.1 can run out of memory. The sources do not say what input triggers it or whether an attacker can exploit it beyond crashing the node.","audience":"businesses","category":"other","nicknames":[],"who_cares":["bitcoin-core","self-hosted"],"confidence":0.4,"fix_status":"available","needs_auth":"unknown","worst_case":"node process runs out of memory and crashes or stalls","analyst_note":"Find the NVD entry and the Bitcoin Core release notes to learn the triggering input, the network reach and whether the flaw is remotely reachable.","how_to_check":"- Check the installed Bitcoin Core version with `bitcoind --version`\n- Compare it against the fixed releases 29.5, 30.4, 31.2 and 32.1\n- Exposure beyond this is unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Bitcoin Core nodes on versions before 29.5, 30.4, 31.2 or 32.1. The sources do not say which inputs or configurations trigger the memory exhaustion, so the exact exposure is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000687,"input_tokens":4071,"output_tokens":559,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117349':16A,19A '-2026':15A,18A '29.5':13A,31B,65C '30.4':32B,66C '31.2':33B,67C '32.1':35B,69C 'attack':53B 'beyond':57B 'bitcoin':1A,21B,27B,61C 'bitcoin-cor':20B 'bug':7A 'core':2A,22B,28B,62C 'crash':9A,58B 'cve':14A,17A 'exploit':55B 'host':26B 'input':47B 'issu':75C 'memori':6A,40B 'node':11A,60B 'oom':74C 'out-of-memori':3A 'prior':63C 'run':37B 'say':45B 'self':25B 'self-host':24B 'sourc':42B 'trigger':48B 'version':29B 'vulner':71C 'whether':51B","nicknames":[],"mitigations":[],"who_affected":"Teams that run Bitcoin Core nodes on versions before 29.5, 30.4, 31.2 or 32.1. The sources do not say which inputs or configurations trigger the memory exhaustion, so the exact exposure is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T15:16:46+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117349","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117349","severity":null,"published_at":"2026-10-30T15:16:46+00:00","modified_at":"2026-10-30T15:16:46+00:00","first_seen_at":"2026-10-30T15:31:09+00:00","fetched_at":"2026-10-30T15:31:09+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}