CVE-2024-44073 Information

Description

The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.

Reference

https://github.com/rust-bitcoin/rust-miniscript/pull/712 https://github.com/rust-bitcoin/rust-miniscript/pull/704 https://github.com/rust-bitcoin/rust-miniscript/compare/11.2.0…12.2.0