CVE-2024-34149: Bitcoincore Bitcoin Core

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

In Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a policy size limit check, a different issue than CVE-2023-50428. NOTE: some parties oppose this new limit check (for example, because they agree with the objective but disagree with the technical mechanism, or because they have a different objective).

Affected products

• Bitcoincore Bitcoin Core: version 0.10.0 only

Published 2024-04-30. Last modified 2026-06-17.