CVE-2014-4501: Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3....

Security readout for executives and security teams

Old cryptocurrency mining clients can be crashed or otherwise impacted by a malicious or compromised mining pool server sending an overly long reconnect URL. The sources do not specify business impact beyond a stack buffer overflow, and no active exploitation evidence is provided. Exposure is limited to systems running the affected mining clients and connecting to remote Stratum pool servers. General enterprise exposure is unlikely unless legacy mining software is present in approved workloads, lab systems, or unauthorized shadow IT. Treat as a targeted legacy exposure issue. Prioritize if the organization knowingly runs mining clients or has a risk of unauthorized mining software. Otherwise, handle through asset discovery and unsupported software removal. Mitigation focus: Upgrade sgminer to 4.2.2 or later where still deployed.; Upgrade cgminer to 4.3.5 or later where still deployed.; Upgrade BFGMiner to 3.3.0 or later where still deployed..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.