🚨 CVE-2025-43707: Critical bug in rust-miniscript caused crashes when compiling certain threshold descriptors (e.g., 3-of-3 with mixed conditions).
No funds lost.
Caught by Wizardsardine.
Rob1Ham (nprofile…u58c) walks us through it in BR096.
npub1qd…pzclt
2025-05-24 17:15:02 UTC
Author Public Key
npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzcltSeen on
wss://relay.damus.ioPublished at
2025-05-24 17:15:02 UTCEvent JSON
{
"id": "8ba9672525be0fc7a227296b9b20adfe68b86576bc2f1cb4e097ae8f529b6c4d",
"pubkey": "0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08",
"created_at": 1748106902,
"kind": 1,
"tags": [
[
"p",
"cedab81be42ef47dbde653f4ba7ab25ac3aa32cfc2b672ee0f89c0faf882f13e",
"wss://premium.primal.net",
"mention"
]
],
"content": "🚨 CVE-2025-43707: Critical bug in rust-miniscript caused crashes when compiling certain threshold descriptors (e.g., 3-of-3 with mixed conditions).\n\nNo funds lost.\nCaught by Wizardsardine.\n\nnostr:nprofile1qqsvak4cr0jzaarahhn98a9602e94sa2xt8u9dnjac8cns86lzp0z0sprpmhxue69uhhqun9d45h2mfwwpexjmtpdshxuet5qyvhwumn8ghj7un9d3shjtnwdaehgunpw35jucm0d5hs8wu58c walks us through it in BR096.\nhttps://blossom.primal.net/53b3788231f2f10634fbd389a4cd9ccbcdae04a5cdfa62a9cb9dc0c252cf03e3.mp4",
"sig": "16657aa22b624088dccf043ed7b53105f55859a8c0296c1818eee6805644c202913508836947580b71e4d6ffc0d77eb7ad09cd4217e0aac7cee9752473054ad4"
}