CVE-2023-37192

Published Jul 7, 2023

Last updated a year ago

Overview

Description: Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-311

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bitcoin:bitcoin_core:22.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "48C9311E-0E15-4879-81C2-38F2A2338F53"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References