Medium severity6.5NVD Advisory· Published Nov 18, 2024· Updated Jun 17, 2026
CVE-2024-52917
CVE-2024-52917
Description
Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*range: <22.0
- (no CPE)range: <22.0
- Bitcoin Core/Bitcoin Coredescription
Patches
Vulnerability mechanics
References
2- bitcoincore.org/en/2024/07/31/disclose-upnp-oom/nvdVendor Advisory
- en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresnvdThird Party Advisory
News mentions
0No linked articles in our index yet.