NetSight
medium6.3

CVE-2024-34149

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428.

Impact

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check (for example, because they agree with the objective but disagree with the technical mechanism, or because they have a different objective).

Affected products

ProductAffected versions
Bitcoin Core
through 27.0
Bitcoin Knots
before 25.1.knots202311

Versions were read from the advisory text. No structured product data has been published for this record yet.

References