Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message that are not committed to in a block\'s merkle root. FillBlock can be called twice for one PartiallyDownloadedBlock instance.