-
@ Bitcoin.Review
2025-05-24 17:15:02
🚨 CVE-2025-43707: Critical bug in rust-miniscript caused crashes when compiling certain threshold descriptors (e.g., 3-of-3 with mixed conditions).
No funds lost.
Caught by Wizardsardine.
nostr:nprofile1qqsvak4cr0jzaarahhn98a9602e94sa2xt8u9dnjac8cns86lzp0z0sprpmhxue69uhhqun9d45h2mfwwpexjmtpdshxuet5qyvhwumn8ghj7un9d3shjtnwdaehgunpw35jucm0d5hs8wu58c walks us through it in BR096.
https://blossom.primal.net/53b3788231f2f10634fbd389a4cd9ccbcdae04a5cdfa62a9cb9dc0c252cf03e3.mp4