CVEvulnerability
CVE-2023-37192
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-311
Description
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
Affected configurations
• bitcoin bitcoin core 22.0
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://bitcoin.org/en/bitcoin-core/ Product
- https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html Exploit, Third Party Advisory
- https://www.youtube.com/watch?v=oEl4M1oZim0 Exploit, Third Party Advisory
- https://bitcoin.org/en/bitcoin-core/ Product
- https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html Exploit, Third Party Advisory
- https://www.youtube.com/watch?v=oEl4M1oZim0 Exploit, Third Party Advisory