cve.bz

CVE-2022-44797

9.8 criticalEPSS 1.3%

Critical (9.8) in btcd project btcd. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in github.com/btcsuite/btcd 0.23.2.

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-2chg-86hq-7w38Gogithub.com/btcsuite/btcd<0.23.20.23.2
GHSA-2chg-86hq-7w38Gogithub.com/lightningnetwork/lnd<0.15.2-beta0.15.2-beta
GO-2022-1098Gogithub.com/btcsuite/btcd<0.23.20.23.2

References

Check your stackJSON