CVE-2014-6251: Cpuminer Project Cpuminer

Medium severity, CVSS 6.0. EPSS: 1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request.

Affected products

• Cpuminer Project Cpuminer: up to and including 2.4.0

Published 2014-10-25. Last modified 2026-06-17.