CVE-2014-4502: Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4...

Security readout for executives and security teams

This CVE affects older cryptocurrency mining clients. A malicious or compromised mining pool server can send malformed Stratum messages that trigger heap buffer overflows. The public record does not specify the resulting impact, so urgency depends on whether the organization still runs these miners or connects them to untrusted pools. Exposure is likely limited to systems running the named legacy mining clients, especially miners configured to use external Stratum pool servers. General enterprise systems are not indicated as affected by the provided sources. The source bundle’s structured affected list is n/a, but the CVE description names the products and fixed-version thresholds. Treat this as targeted legacy-technology risk, not broad enterprise exposure. It deserves prompt attention only where cryptocurrency mining software is approved, operational, or present in labs. If no such software exists, record the inventory result and monitor for unauthorized miners. Mitigation focus: Upgrade sgminer to 4.2.2 or later if it is still used.; Upgrade cgminer to 4.3.5 or later if it is still used.; Upgrade BFGMiner to 4.1.0 or later if it is still used..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.