CVE-2024-52917
No fix known EPSS <1%CVSS 6.5
Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.
Products: bitcoin_core