https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-46597.htmlhttps://patchthecve.com/cve/CVE-2025-46597.htmlWed, 17 Jun 2026 09:26:41 +0000HIGH 7.5: Bitcoin Core 0.13.0 through 29.x has an integer overflow.https://patchthecve.com/cve/CVE-2025-46598.htmlhttps://patchthecve.com/cve/CVE-2025-46598.htmlWed, 17 Jun 2026 09:26:41 +0000MEDIUM 5.3: Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.https://patchthecve.com/cve/CVE-2025-54605.htmlhttps://patchthecve.com/cve/CVE-2025-54605.htmlWed, 17 Jun 2026 09:40:23 +0000HIGH 7.5: Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).https://patchthecve.com/cve/CVE-2025-54604.htmlhttps://patchthecve.com/cve/CVE-2025-54604.htmlWed, 17 Jun 2026 09:40:23 +0000HIGH 7.5: Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).https://patchthecve.com/cve/CVE-2024-55563.htmlhttps://patchthecve.com/cve/CVE-2024-55563.htmlWed, 17 Jun 2026 08:11:14 +0000MEDIUM 5.3: Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transhttps://patchthecve.com/cve/CVE-2024-52922.htmlhttps://patchthecve.com/cve/CVE-2024-52922.htmlWed, 17 Jun 2026 08:07:52 +0000MEDIUM 6.5: In Bitcoin Core before 25.1, an attacker can cause a node to not download the latest block, because there can be minutes of delay when an announcing peer stalls instead of complying with the peer-to-peer protocol specification.https://patchthecve.com/cve/CVE-2024-52921.htmlhttps://patchthecve.com/cve/CVE-2024-52921.htmlWed, 17 Jun 2026 08:07:52 +0000MEDIUM 5.3: In Bitcoin Core before 25.0, a peer can affect the download state of other peers by sending a mutated block.https://patchthecve.com/cve/CVE-2024-52920.htmlhttps://patchthecve.com/cve/CVE-2024-52920.htmlWed, 17 Jun 2026 08:07:52 +0000HIGH 7.5: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.https://patchthecve.com/cve/CVE-2024-52919.htmlhttps://patchthecve.com/cve/CVE-2024-52919.htmlWed, 17 Jun 2026 08:07:52 +0000MEDIUM 6.5: Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages.https://patchthecve.com/cve/CVE-2024-52917.htmlhttps://patchthecve.com/cve/CVE-2024-52917.htmlWed, 17 Jun 2026 08:07:51 +0000MEDIUM 6.5: Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.https://patchthecve.com/cve/CVE-2024-52916.htmlhttps://patchthecve.com/cve/CVE-2024-52916.htmlWed, 17 Jun 2026 08:07:51 +0000HIGH 7.5: Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.https://patchthecve.com/cve/CVE-2024-52915.htmlhttps://patchthecve.com/cve/CVE-2024-52915.htmlWed, 17 Jun 2026 08:07:51 +0000HIGH 7.5: Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.https://patchthecve.com/cve/CVE-2024-52914.htmlhttps://patchthecve.com/cve/CVE-2024-52914.htmlWed, 17 Jun 2026 08:07:51 +0000HIGH 7.5: In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.https://patchthecve.com/cve/CVE-2024-52913.htmlhttps://patchthecve.com/cve/CVE-2024-52913.htmlWed, 17 Jun 2026 08:07:51 +0000MEDIUM 5.3: In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled.https://patchthecve.com/cve/CVE-2024-52912.htmlhttps://patchthecve.com/cve/CVE-2024-52912.htmlWed, 17 Jun 2026 08:07:50 +0000HIGH 7.5: Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an abs64 logic bug.https://patchthecve.com/cve/CVE-2019-25220.htmlhttps://patchthecve.com/cve/CVE-2019-25220.htmlWed, 17 Jun 2026 02:31:46 +0000HIGH 7.5: Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.https://patchthecve.com/cve/CVE-2024-35202.htmlhttps://patchthecve.com/cve/CVE-2024-35202.htmlWed, 17 Jun 2026 07:34:32 +0000HIGH 7.5: Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block's merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instanc