CVE-2024-44073

Description

The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.

Affected Platforms

Weakness Type

CWE-787, CWE-674

References

• https://github.com/rust-bitcoin/rust-miniscript/compare/11.2.0...12.2.0
• https://github.com/rust-bitcoin/rust-miniscript/pull/704
• https://github.com/rust-bitcoin/rust-miniscript/pull/712