CVE-2025-24883: Ethereum Go-Ethereum

High severity, CVSS 8.7. EPSS: 0.7% chance of exploitation in the next 30 days.

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.14.13.

Affected products

• Ethereum Go-Ethereum: from 1.14.0, before 1.14.13 (fixed in 1.14.13)

Published 2025-01-30. Last modified 2026-06-17.