CVE-2025-46598 - CPU DoS from unconfirmed transaction processing

<p>Disclosure of the details of a resource exhaustion issue when processing an unconfirmed transaction. A fix was released on October 10th 2025 in Bitcoin Core v30.0.</p> <p>This issue is considered <strong>Low</strong> severity.</p> <h2 id="details">Details</h2> <p>An attacker could send specially-crafted unconfirmed transactions that would take a victim node a few seconds each to validate. The non-standard transactions would be rejected but not lead to a disconnection and the process could be repeated. This could be exploited to delay block propagation.</p> <p>The issue was mitigated in multiple steps by reducing the validation time in different Script contexts.</p> <h2 id="attribution">At