CVE-2023-37192

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-07-07 · updated 2026-06-17
Weakness: CWE-311

Description

Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.

Affected products

Bitcoin Core: 22.0

References

https://bitcoin.org/en/bitcoin-core/
https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html
https://www.youtube.com/watch?v=oEl4M1oZim0
https://bitcoin.org/en/bitcoin-core/
https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html
https://www.youtube.com/watch?v=oEl4M1oZim0

Get alerted when CVE-2023-37192 or the next vulnerability affects your stack