{"id":"CVE-2023-37192","aliases":["EUVD-2023-41112","GHSA-fgxx-jcm3-9c59","openSUSE-SU-2026:11073-1","openSUSE-SU-2026:21149-1"],"status":"published","title":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00575,"percentile":0.47909,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-311"],"published":"2023-07-06T00:00:00Z","modified":"2026-10-28T02:30:27Z","affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bitcoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.0-2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bitcoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.1-bp160.2.1"}]}],"bundled":6}],"products":[{"vendor":"bitcoin","product":"bitcoin_core"}],"references":[{"url":"https://bitcoin.org/en/bitcoin-core/","tags":["x_transferred","Product","web"]},{"url":"https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html","tags":["x_transferred","Exploit","Third Party Advisory","article"]},{"url":"https://www.youtube.com/watch?v=oEl4M1oZim0","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37192","tags":["advisory"]},{"url":"https://bitcoin.org/en/bitcoin-core"},{"url":"https://github.com/advisories/GHSA-fgxx-jcm3-9c59"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37192.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35202","tags":["web"]},{"url":"https://bugzilla.suse.com/1125092","tags":["report"]},{"url":"https://bugzilla.suse.com/1149711","tags":["report"]},{"url":"https://bugzilla.suse.com/1181784","tags":["report"]},{"url":"https://bugzilla.suse.com/1181786","tags":["report"]},{"url":"https://bugzilla.suse.com/1217678","tags":["report"]},{"url":"https://bugzilla.suse.com/1231507","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3195","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-37192","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","status":"published","published":"2023-07-06T00:00:00Z","modified":"2024-11-20T19:46:59.561Z","updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-41112","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","status":"published","published":"2023-07-06T00:00:00Z","modified":"2024-11-20T19:46:59Z","updated_at":"2026-11-03T00:04:53.318425Z"}],"ghsa":[{"id":"GHSA-fgxx-jcm3-9c59","title":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored...","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","status":"published","published":"2023-07-07T00:30:24Z","modified":"2024-04-04T05:50:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-311"],"updated_at":"2026-11-02T14:56:36.514369Z"}],"nvd":[{"id":"CVE-2023-37192","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","status":"published","published":"2023-07-07T00:15:10.297Z","modified":"2026-06-17T06:07:41.82Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-311"],"updated_at":"2026-11-02T14:08:15.127597Z"}],"osv":[{"id":"CVE-2023-37192","description":"Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.","status":"published","published":"2023-07-06T00:00:00Z","modified":"2026-10-28T02:30:27.458092033Z","updated_at":"2026-11-02T15:44:32.510144Z"},{"id":"openSUSE-SU-2026:11073-1","title":"bitcoin-qt6-31.0-2.1 on GA media","description":"These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:18.748866048Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21149-1","title":"Security update for bitcoin","description":"This update for bitcoin fixes the following issues:\n\nChanges in bitcoin:\n\n- Reference the tracking bugs for CVEs already fixed in current bitcoin\n  (the affected versions all predate the shipped release):\n  * CVE-2018-20587 (boo#1125092)\n  * CVE-2019-15947 (boo#1149711)\n  * CVE-2020-14198 (boo#1181786)\n  * CVE-2021-3195 (boo#1181784)\n  * CVE-2023-37192 (boo#1217678)\n  * CVE-2024-35202 (boo#1231507)\n","status":"published","published":"2026-06-23T12:48:21Z","modified":"2026-06-30T18:24:45.556135363Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}