CVE-2023-37192
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...
CVE-2023-37192 is a high vulnerability (CVSS 7.5) in Bitcoin Core, published July 6, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in bitcoin 31.0-2.1.
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- Record
CVE-2023-37192- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-311
- Updated
- 2026-11-02
CVE List No score
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- Record
CVE-2023-37192- Updated
- 2026-11-02
EUVDEUVD-2023-41112 No score
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- Record
EUVD-2023-41112- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fgxx-jcm3-9c59
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- Record
GHSA-fgxx-jcm3-9c59- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-311
- Updated
- 2026-11-02
OSV No score
Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
- Record
CVE-2023-37192- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11073-1 No score
bitcoin-qt6-31.0-2.1 on GA media
These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11073-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21149-1 No score
Security update for bitcoin
This update for bitcoin fixes the following issues:
Changes in bitcoin:
- Reference the tracking bugs for CVEs already fixed in current bitcoin
(the affected versions all predate the shipped release):
- CVE-2018-20587 (boo#1125092)
- CVE-2019-15947 (boo#1149711)
- CVE-2020-14198 (boo#1181786)
- CVE-2021-3195 (boo#1181784)
- CVE-2023-37192 (boo#1217678)
- CVE-2024-35202 (boo#1231507)
- Record
openSUSE-SU-2026:21149-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bitcoin.org/en/bitcoin-core
satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html
youtube.com/watch?v=oEl4M1oZim0
nvd.nist.gov/vuln/detail/CVE-2023-37192
github.com/advisories/GHSA-fgxx-jcm3-9c59
Show 12 moreShow less
suse.com/security/cve/CVE-2018-20587
bugzilla.suse.com/1125092