{"id":"CVE-2026-117350","kind":"vulnerability","aliases":["CVE-2026-117350"],"related":[],"title":"Bitcoin Core: out-of-memory bug in versions before 29.5, 30.4, 31.2, 32.1","description":"Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.","summary":"Bitcoin Core versions before 29.5, 30.4, 31.2 and 32.1 can run out of memory when handling some input. The sources do not say what input triggers it or what an attacker gets beyond a crash or resource exhaustion.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bitcoin-core","bitcoin-node","other","self-hosted"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Run `bitcoind --version` (or `bitcoin-qt --version`) and compare against 29.5, 30.4, 31.2 and 32.1","fix":"- Move to `29.5`, `30.4`, `31.2` or `32.1` on the matching release line","status":"open","published_at":"2026-10-30T14:16:39+00:00","first_seen_at":"2026-10-30T14:30:53+00:00","triaged_at":"2026-10-30T14:33:09+00:00","updated_at":"2026-10-30T14:33:09+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-10-30T14:33:09Z","model":"claude-haiku-5-5","output":{"fix":"- Move to `29.5`, `30.4`, `31.2` or `32.1` on the matching release line\n- unknown for any other fix detail","reach":"unknown","title":"Bitcoin Core: out-of-memory bug in versions before 29.5, 30.4, 31.2, 32.1","impact":"low","summary":"Bitcoin Core versions before 29.5, 30.4, 31.2 and 32.1 can run out of memory when handling some input. The sources do not say what input triggers it or what an attacker gets beyond a crash or resource exhaustion.","audience":"businesses","category":"other","nicknames":[],"who_cares":["bitcoin-core","bitcoin-node","self-hosted"],"confidence":0.3,"fix_status":"available","needs_auth":"unknown","worst_case":"Node process exhausts memory and crashes; further impact unknown","analyst_note":"Find the Bitcoin Core advisory for CVE-2026-117350 to learn the trigger path (P2P, RPC, wallet) and whether it allows more than a crash.","how_to_check":"- Run `bitcoind --version` (or `bitcoin-qt --version`) and compare against 29.5, 30.4, 31.2 and 32.1\n- unknown for anything beyond the version check","plain_action":"","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Operators running Bitcoin Core nodes on the affected release lines. The sources do not say whether exposure depends on RPC or P2P reachability, wallet use or configuration, so unknown beyond the version range.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000705,"input_tokens":4071,"output_tokens":595,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117350':17A,20A '-2026':16A,19A '29.5':11A,35B,73C '30.4':12A,36B,74C '31.2':13A,37B,75C '32.1':14A,39B,77C 'attack':61B 'beyond':63B 'bitcoin':1A,22B,25B,31B,69C 'bitcoin-cor':21B 'bitcoin-nod':24B 'bug':7A 'core':2A,23B,32B,70C 'crash':65B 'cve':15A,18A 'exhaust':68B 'get':62B 'handl':46B 'host':30B 'input':48B,55B 'issu':83C 'memori':6A,44B 'node':26B 'oom':82C 'out-of-memori':3A 'prior':71C 'resourc':67B 'run':41B 'say':53B 'self':29B 'self-host':28B 'sourc':50B 'trigger':56B 'version':9A,33B 'vulner':79C","nicknames":[],"mitigations":[],"who_affected":"Operators running Bitcoin Core nodes on the affected release lines. The sources do not say whether exposure depends on RPC or P2P reachability, wallet use or configuration, so unknown beyond the version range.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:16:39+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117350","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117350","severity":null,"published_at":"2026-10-30T14:16:39+00:00","modified_at":"2026-10-30T14:16:39+00:00","first_seen_at":"2026-10-30T14:30:53+00:00","fetched_at":"2026-10-30T14:30:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}