CVE-2021-3401 - CVE House
Back to Database
Status published Critical CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute...

Vulnerability Description

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states "I believe that this vulnerability cannot actually be exploited."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3401

Credits & Attribution

No credits recorded in the NVD database.

References

More from bitcoin

View All →
CVE-2021-3195
bitcoind in Bitcoin Core through 0.21.0 can create a new...
High 7.5
CVE-2021-31876
Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the...
Medium 6.5
CVE-2020-14198
Bitcoin Core 0.20.0 allows remote denial of service....
High 7.5
CVE-2019-25220
Bitcoin Core before 24.0.1 allows remote attackers to cause a...
Unknown 0
CVE-2019-15947
In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in...
High 7.5

Affected Vendor

Affected Software

bitcoin
Vulnerable Versions:
0

Timeline

Official Publish: February 4th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.