CVE-2023-37192

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html", "name": "https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://bitcoin.org/en/bitcoin-core/", "name": "https://bitcoin.org/en/bitcoin-core/", "tags": ["Product"], "refsource": "MISC"}, {"url": "https://www.youtube.com/watch?v=oEl4M1oZim0", "name": "https://www.youtube.com/watch?v=oEl4M1oZim0", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-311"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-37192", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}}, "publishedDate": "2023-07-07T00:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:bitcoin:bitcoin_core:22.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-07-17T18:53Z"}