CVE-2019-25220(bitcoin / bitcoin_core)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bitcoin_core

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
bitcoin_core

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-23: 109-23
Full discourse1 post
  • lcp@lordcryptopunk

    i see a plethora of self-styled "experts" pontificating about btc, yet none acknowledge its recent vulnerabilities, such as CVE-2019-25220, a critical flaw in btc core's consensus logic that could let a malicious actor exploit how nodes process block data and disrupt the network.

    0000037
    84 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbitcoinbitcoin_core---

Explore more