Live · updated 8 minutes ago · 121 stories in 24h

← Stream
Hacks & Security Confirmed First seen

Bitcoin Core fixes two medium-severity memory issues in versions 29.5 to 32.1

Bitcoin Core disclosed two medium-severity, easily discoverable vulnerabilities that could cause unbounded memory growth, with fixes released in versions 29.5, 30.4, 31.2 and 32.1. One issue involves paused pre-BIP31 peers whose announcement queue could grow without limit; the other affects non-Linux platforms where TCP urgent data could exhaust memory via the select() code path. Linux users are not affected by the second issue.

Why “Confirmed”

  • Published by a primary source: Bitcoin Core

1 independent source group across 2 posts · evidence score 90/100. How labels work

What the sources claim

  1. Bitcoin Core says a fix for the paused pre-BIP31 peer memory growth issue was released in versions 29.5, 30.4, 31.2 and 32.1.

    “A fix for this issue was released in Bitcoin Core versions 29.5, 30.4, 31.2 and 32.1.”
    Bitcoin Core
  2. A malicious peer could pretend not to support BIP 31 nonced pings and delay reading to grow the queue without limit.

    “a malicious peer could pretend to not support those and strategically delay reading messages to cause the queue to slowly grow without limit”
    Bitcoin Core
  3. Bitcoin Core rates the paused pre-BIP31 peer issue as Medium severity and easily discoverable.

    “This issue is considered Medium severity and easily discoverable.”
    Bitcoin Core
  4. On non-Linux platforms a malicious peer could exhaust node memory by sending TCP urgent data, fixed in versions 29.5, 30.4, 31.2 and 32.1.

    “a malicious peer could cause a node to run out of memory by sending TCP urgent (out-of-band) data”
    Bitcoin Core
  5. The TCP urgent data issue only affects the select() code path, so Linux users are not affected.

    “This issue only affects the select() code path. Bitcoin Core users on Linux are therefore not affected by this issue.”
    Bitcoin Core
  6. Bitcoin Core rates the TCP urgent data issue as Medium severity and easily discoverable.

    “This issue is considered Medium severity and easily discoverable.”
    Bitcoin Core

Sources

More in Hacks & Security

All Hacks & Security stories →

Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-28 18:20 UTC. Labels are computed from the sources, not by the model.