CVE-2025-46597
Published: 20 March 2026
Summary
CVE-2025-46597 is a high-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Bitcoin Bitcoin Core. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 14.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SC-5 (Denial-of-service Protection).
Deeper analysis
CVE-2025-46597 is an integer overflow vulnerability (CWE-190) affecting Bitcoin Core versions 0.13.0 through 29.x. Published on 2026-03-20T16:16:16.207, it has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating a high-severity issue primarily impacting availability.
The vulnerability enables remote attackers with network access to exploit it with low complexity, without requiring privileges or user interaction. Successful exploitation leads to a denial-of-service condition due to the high availability impact, while confidentiality and integrity remain unaffected.
Bitcoin Core's disclosure provides further details at https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-46597/, and patches are available via releases at https://github.com/bitcoin/bitcoin/releases. Security practitioners should prioritize updating affected nodes to mitigate potential disruptions.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-208891
Vulnerability details
Bitcoin Core 0.13.0 through 29.x has an integer overflow.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Integer overflow in network-exposed Bitcoin Core service directly enables remote application exploitation resulting in endpoint DoS (availability impact only).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, prioritization, and correction of flaws like the integer overflow in Bitcoin Core, primarily through applying available patches to prevent remote DoS exploitation.
Implements protections against denial-of-service events, limiting the effects of remote exploitation causing high availability impact from the integer overflow.
Enables continuous monitoring of system activity to identify indicators of DoS attacks or crashes triggered by the integer overflow vulnerability.