-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/btcsuite/btcd | go | < 0.24.2-beta.rc1 | 0.24.2-beta.rc1 |
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from btcd's removeOpcodeByData implementation differing from Bitcoin Core's FindAndDelete. The commit diff shows the critical change from substring matching (bytes.Contains) to exact matching (bytes.Equal) in script.go. This matches the advisory's description of the vulnerability where btcd removed partial matches while Bitcoin Core required exact matches. The function's role in signature validation (modifying scriptCode for sighash) directly impacts consensus-critical behavior.
Ongoing coverage of React2Shell