CVE-2025-54605

Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2)

High · published October 28, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

⚡ A clever series of requests can cause Bitcoin Core to run out of resources! This high-severity flaw in versions up to 29.0 is no joke. 💰 Think of it as a bank teller overwhelmed with transactions—each new request stacks up, slowing everything down and eventually causing a complete backlog that halts operations entirely. 📉 An attacker could send an endless stream of requests, consuming all available system resources. This could lead to service outages or severely degraded performance, leaving users in the lurch and unable to access their funds or perform transactions. Scary, right?

Put simply

Think of it as a bank teller overwhelmed with transactions—each new request stacks up, slowing everything down and eventually causing a complete backlog that halts operations entirely. 📉 This vulnerability allows uncontrolled resource consumption, where excessive requests lead to system strain, potentially crashing the service or rendering it unresponsive. Effectively, any limit on how much processing power a request can consume is bypassed.

What to do

An attacker could send an endless stream of requests, consuming all available system resources. This could lead to service outages or severely degraded performance, leaving users in the lurch and unable to access their funds or perform transactions. Scary, right? To tackle this vulnerability, upgrade your Bitcoin Core installation to version 29.1 or later immediately. Additionally, consider implementing rate limiting on incoming requests to safeguard your services against resource exhaustion attacks. 🛡️ You've got this! Stay vigilant and proactive, and you’ll keep your system secure! 💪

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.4th percentile
Published
2025-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2)
    cvelistv5