Bitcoin Core quietly patched high-severity memory bug months before public disclosure, but many nodes may still run affected software
The Block
Bitcoin Core resolved a high-severity memory vulnerability in 2024, yet many nodes remain at risk as they have not updated to the latest software.Summary
Bitcoin Core developers addressed a critical memory safety flaw, CVE-2024-52911, by issuing a covert patch months before its public disclosure in May 2026. The vulnerability, which could have allowed remote node crashes or code execution, was discovered by Cory Fields and secretly addressed by Pieter Wuille. While the consensus layer remained secure, current estimates suggest that approximately 43% of Bitcoin nodes are still running older, vulnerable versions, highlighting a persistent security risk.
(Source：The Block)