CVE-2023-37192

Published Jul 7, 2023

Last updated 3 months ago

Overview

Description: Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-311

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bitcoin:bitcoin_core:22.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "48C9311E-0E15-4879-81C2-38F2A2338F53"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References