Fellipe Weno

fweno.onefour.com.br

Current Conditions

São Paulo
nuvens quebradas

11 ℃

93%

Temperatura

Umidade

Fonte: OpenWeatherMap. - 06:00:01

[USD] USD 64,344.69

[BRL] BRL 328,908.45 [USD] USD 64,344.69 [GBP] GBP 48,547.56 [EUR] EUR 56,014.24
Price index provided by blockchain.info.
After Bitcoin Core 0.14.0 and before Bitcoin Core 29.0, validating a specially-crafted block may cause the node to access previously freed memory.
During validation, necessary data required for checking inputs for each transaction is pre-calculated and cached. For specially crafted invalid blocks, it was possible for this data to be destroyed while it was still being accessed by a background validation thread. An attacker capable of mining a block with sufficient proof-of-work could have exploited this to crash victim nodes. Because of the nature of use-after-free bugs, it is possible that the crash could have been used for remote code execution, though constraints on the input (block) data make this unlikely.
This issue is considered High severity.

Details
By default, script validation for new blocks is dispatched to background threads via a vector of CScriptCheck functors. Each CScriptCheck holds a pointer to a PrecomputedTransactionData object which stores some data needed by each input in the transaction. Because it stores a pointer and not the data itself, care must be taken to ensure that the PrecomputedTransactionData outlives the CScriptCheck.
The script checks lifetime is enforced by an RAII class, CCheckQueueControl. However, the control is intantiated before the precomputed transaction data. Because local objects in C++ are destructed in reverse order of construction, this means the vector of PrecomputedTransactionData is destroyed before the CCheckQueueControl.
This is not an issue when the block is valid, as CCheckQueueControl::Wait() will be called before the function returns and the PrecomputedTransactionData gets destroyed. However, in case of an early return (when a separate check fails) a background script thread may read the precomputed transaction data after it was destroyed. An attacker could exploit this to crash victim nodes at the expense of a valid PoW at tip.

Attribution
Cory Fields (MIT DCI) discovered this vulnerability and responsibly disclosed it in a detailed report containing a proof of concept for reproduction and a proposed mitigation.

Timeline
- 2024-11-02 Cory Fields privately reports the bug
- 2024-11-06 Pieter Wuille pushes a covert fix to already open PR #31112 which works around the issue by removing the early returns
- 2024-12-03 PR #31112 is merged
- 2025-04-12 Bitcoin Core version 29.0 is released with a fix
- 2026-04-19 The last vulnerable Bitcoin Core version (28.x) goes end of life
- 2026-05-05 Public disclosure.

dog - 06:18:22 up 271 days, 14:49, 6 users, load average: 0.00, 0.00, 0.00

[17/06/2026 18:31] Trump e presidente do Irã assinam acordo de paz, que já está em vigor - G1

[17/06/2026 19:39] "Não se meta nas eleições do Brasil", diz Lula a Trump - Poder360

[17/06/2026 17:47] PF encontra diálogos de Hugo Motta pedindo a Vorcaro empréstimo do Master à empresa da cunhada - Estadão

[17/06/2026 22:45] Vorcaro pediu para Sicário "ir pra cima" de capitão do iate onde dava festa - CNN Brasil

[17/06/2026 22:23] Pai de youtuber morto em queda de helicóptero no Rio: 'Não foi acidente' - UOL Notícias

[17/06/2026 17:50] Primeira onda de frio do inverno: ar polar traz marcas abaixo de 0°C em grande área - Meteored Brasil

[17/06/2026 20:57] Eduardo Bolsonaro pede novas sanções de Trump a Moraes - Poder360

[17/06/2026 12:09] IBGE oferta salários de até R$ 5,2 mil em seleção com 389 vagas para mais de 40 cidades de SC - G1

[17/06/2026 20:06] Alcolumbre diz que PEC do BC deve ser votada “o mais rápido possível” - Poder360

[17/06/2026 16:26] STF exige representante de big techs no Brasil e dá 60 dias para adaptação - CNN Brasil

[CVE-2026-27171] [Modified: 17-06-2026] [Analyzed] [V3.1 S2.9:LOW] zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

[CVE-2026-2644] [Modified: 17-06-2026] [Analyzed] [V3.1 S3.3:LOW] A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File Parser. This manipulation of the argument variable index with the input 2147483648 causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

[CVE-2026-2653] [Modified: 17-06-2026] [Analyzed] [V3.1 S5.3:MEDIUM] A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.

[CVE-2025-33236] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33239] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33240] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33241] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33243] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33245] [Modified: 17-06-2026] [Analyzed] [V3.1 S8.0:HIGH] NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33246] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, or information disclosure.

[CVE-2025-33249] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

[CVE-2025-33250] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

[CVE-2025-33251] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

[CVE-2025-33252] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

[CVE-2025-33253] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

[CVE-2025-60035] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running the OPC.Testclient.

[CVE-2025-60036] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running the UA.Testclient.

[CVE-2025-60037] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running Rexroth IndraWorks.

[CVE-2025-60038] [Modified: 17-06-2026] [Analyzed] [V3.1 S7.8:HIGH] A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running Rexroth IndraWorks.

[CVE-2026-1435] [Modified: 17-06-2026] [Analyzed] [V3.1 S9.8:CRITICAL] Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of session invalidation after new logins. The application generates a new 'sessionId' each time a user authenticates, but does not invalidate previously issued session identifiers, which remain valid even after multiple consecutive logins by the same user. As a result, a stolen or leaked 'sessionId' can continue to be used to authenticate valid requests. Exploiting this vulnerability would allow an attacker with access to the web service/API network (port 9000 or HTTP/S endpoint of the server) to reuse an old session token to gain unauthorized access to the application, interact with the API/web, and compromise the integrity of the affected account.