-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0287
============================================================

Advisory-ID:  0xCERT-2026-0287
Severity:     Medium
Published:    2026-10-30T15:16:46.777Z
Updated:      2026-10-30T16:08:09.427Z
Chains:       Bitcoin
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0287

Title: CVE-2026-117346: Bitcoin Core through 31

Summary
- -------
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

Details
- -------
Summary
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

Severity
Not yet scored by NVD; rated Medium by 0xCERT pending analysis.

Recommended actions
- - Check whether you run or depend on the affected component and version
- - Apply the vendor's fix or mitigation from the references below

Source & attribution
This 0xCERT advisory summarises CVE-2026-117346 from the U.S. National Vulnerability Database: https://nvd.nist.gov/vuln/detail/CVE-2026-117346. Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://nvd.nist.gov/vuln/detail/CVE-2026-117346
- - http://bitcoin.com
- - https://bitcoincore.org/en/2026/10/28/disclose-undo-overflow/

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmroJTkJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmenH0fZYAHWtJr9tBUVPDVyHHmtmkjZz5B2IC+U
ih90CRYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAAn9gD+MwGdB+rgL1m/t222
xD6I0qoK2MyJmbM3896lwUfDQn8BAKSASVzTIm0CZKFcQiiKPZqWiP283/wf
Y1dYj5nWMqoC
=UH0O
-----END PGP SIGNATURE-----