CVE-2021-43668: Ethereum Go Ethereum

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

Affected products

• Ethereum Go Ethereum: version 1.10.9 only

Published 2021-11-18. Last modified 2026-06-17.