VulnSocial

CVE-2015-20111

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in conjunction with CVE-2015-6031 exploitation.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-31: 210-31
Full discourse2 posts
  • Wal𐤊er@gwalkermusic

    @theswansjr Bitcoin has a long history of bugs and exploits. CVE-2015-3641 CVE-2015-20111 CVE-2017-18350 CVE-2020-14198 CVE-2024-52914 CVE-2024-52915 CVE-2024-52912 Those are just what human's have found in the past. What will AI find? Also lightning is at high risk of exploit with AI.

    10010103
    189 followersView on X
  • Wal𐤊er@gwalkermusic

    @RonSwanonson Don't be so confident. Bitcoin has a long history of bugs and exploits. CVE-2015-3641 CVE-2015-20111 CVE-2017-18350 CVE-2020-14198 CVE-2024-52914 CVE-2024-52915 CVE-2024-52912 These were found by humans, fixed, and then disclosed. The question is what will AI be able to find?

    10000103
    189 followersView on X

Explore more

Back to dashboard