A language model discovered three vulnerabilities in the Bitcoin Core code, all patched and publicly disclosed on October 28. The most serious allows a malicious peer to exhaust the memory of a node running Windows, macOS, or BSD and crash it, while another causes memory usage to grow by as much as 2 MB per hour for each incoming connection. The third corrupts revocation files, particularly when they exceed 2 GiB on a 32-bit system or 4 GiB on a 64-bit system. Fixes are available in versions 32.1, 31.2, 29.5, and 30.4, and Bitcoin Core has announced the upcoming disclosure of three additional vulnerabilities rated medium to high severity. These flaws can interrupt transaction verification and relaying, but they do not enable the theft of bitcoins.
Source: Read the original article
