cve.bz

CVE-2025-24883

8.7 highEPSS 0.7%

High (8.7). EPSS 0.7% chance of exploitation in the next 30 days. Fixed in github.com/ethereum/go-ethereum 1.14.13.

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.14.13.

Severity

CVSS 4.0

8.7 high
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE
CWE-248
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-q26p-9cq4-7fc2Gogithub.com/ethereum/go-ethereum>=1.14.0 <1.14.131.14.13
GO-2025-3436Gogithub.com/ethereum/go-ethereum>=1.14.0 <1.14.131.14.13

References

Check your stackJSON