-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/btcsuite/btcd | go | < 0.24.0 | 0.24.0 |
The vulnerability stems from improper handling of transaction versions as signed integers in BIP 68/112 logic. The commit diff shows critical fixes in these two locations where transaction version checks were missing uint32 casts. calcSequenceLock determines sequence lock activation while opcodeCheckSequenceVerify handles CSV enforcement - both directly impact consensus rule validation. The GitHub advisory and CVE specifically reference these code locations as problematic areas.