CVE-2023-50428

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with…

published December 9, 2023

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OP_FALSE OP_IF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00779 · 55.4th percentile
Published
2023-12-09T00:00Z
EPSS history
Timeline
  • 09 DEC 00:00Z
    In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with…
    cvelistv5