CVE-2023-50428
Medium
Description
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."
SeverityMedium
CVSS5.3
Exploit probability—
Product
Bitcoin Core
PublishedDec 9, 2023
First seenDec 9, 2023
How to fix
Update
- bitcoinknots bitcoin_knots25.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitcoin bitcoin_core | 0.9 ≤ v ≤ 26.0 | — |
| bitcoinknots bitcoin_knots | 0.9 ≤ v < 25.1 | 25.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.