CVE-2023-50428

5.3

CVSS
Medium

PUBLISHED

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code...

Exploited in the wild Remote Low complexity No user interaction

Vendor: Bitcoin
Product: ["Bitcoin Core", "Bitcoin Knots"]
Published: Dec 09, 2023
EPSS: —

Description

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."

CVSS scores

CVSS v3.1 5.3 Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitation status

Exploited in the wild

Recorded 2023-12-09 00:00:00 UTC · Source

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CVE	Dec 09, 2023

Vulnerability detail