CVE-2023-50428: Medium severity bitcoin vulnerability
In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code (e.g., with OPFALSE OPIF), as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the Bitcoin Knots project, some others consider it "not a bug."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50428?
CVE-2023-50428 has a severity rating that suggests a critical security risk due to the ability to bypass datacarrier size limits.
How do I fix CVE-2023-50428?
To fix CVE-2023-50428, update to Bitcoin Core version 26.0 or later, or Bitcoin Knots version 25.1.knots20231115 or later.
What are the potential impacts of CVE-2023-50428?
The potential impacts of CVE-2023-50428 include the exploitation of datacarrier limits, allowing malicious actors to obfuscate data in transactions.
Which versions of Bitcoin Core are affected by CVE-2023-50428?
Bitcoin Core versions from 0.9 up to 26.0 are affected by CVE-2023-50428.
Which versions of Bitcoin Knots are affected by CVE-2023-50428?
Bitcoin Knots versions from 0.9 up to but not including 25.1 are affected by CVE-2023-50428.