High
Security advisory
An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-37492
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:52 UTC · Revision 1
Source evidence
An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.
osv:CVE-2021-37492
Complete source record
{
"id": "98e05b75ea94814c65a768f54b959bd71877ff5d1e8f52fb2b4dcaf07b5cb644",
"url": "https://osv.dev/vulnerability/CVE-2021-37492",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-37492",
"summary": "An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.",
"evidence": "osv:CVE-2021-37492",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2021-37492",
"aliases": [
"CVE-2021-37492"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/bitcoin/bitcoin",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "2fb9c1e6681370478e24a19172ed6d78d95d50d3"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"fixed": "2fb9c1e6681370478e24a19172ed6d78d95d50d3"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v0.9.0rc2",
"noversion",
"v0.8.0",
"v0.9.0rc1",
"v0.8.2",
"v0.7.1rc1",
"v0.7.1",
"v0.8.2rc2",
"v0.8.2rc3",
"v0.8.2rc1",
"v0.8.0rc1",
"v0.7.0rc3",
"v0.7.0",
"v0.7.0rc2",
"v0.7.0rc1",
"v0.6.0rc6",
"v0.6.0",
"v0.6.1",
"v0.5.0rc7",
"v0.5.0",
"v0.6.1rc2",
"v0.6.1rc1",
"v0.6.0rc5",
"v0.6.0rc4",
"v0.6.0rc3",
"v0.4.0",
"v0.6.0rc2",
"v0.6.0rc1",
"v0.5.1rc2",
"v0.5.1",
"v0.5.1rc1",
"v0.5.0rc6",
"v0.5.0rc5",
"v0.5.0rc4",
"v0.5.0rc2",
"v0.5.0rc1",
"v0.4.00rc2",
"v0.4.00rc1",
"v0.3.24",
"v0.3.24rc3",
"v0.3.24rc2",
"v0.3.24rc1",
"v0.3.23rc1",
"v0.3.23",
"v0.3.22",
"v0.3.22rc3",
"v0.3.22rc4",
"v0.3.22rc2",
"v0.3.22rc1",
"v0.3.21",
"v0.3.21rc",
"v0.3.20.2_closest",
"v0.3.20.01_closest",
"v0.3.20",
"v0.3.11_notexact",
"v0.3.8",
"v0.3.7",
"v0.3.6",
"v0.3.3",
"v0.3.2",
"v0.3.1",
"v0.3.1rc1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37492.json",
"vanir_signatures": [
{
"id": "CVE-2021-37492-0f3a7e1a",
"digest": {
"length": 7546,
"function_hash": "125034056860792545625548519770753620605"
},
"source": "https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3",
"target": {
"file": "src/wallet/wallet.cpp",
"function": "CWallet::CreateTransaction"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-37492-f226be0a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"141631597866571102610787215571298713801",
"300707198102548310351294567447427856382",
"110451034427564391564403774319217135396",
"276563020904277374992500244891139996786",
"134756459875976208293807961269881539302",
"119473122598452690608336811633631401181",
"37292230002629892326042622733773995730",
"252025109684205364906881023382772671098",
"307799523843447443646215985410161298010",
"129035121446230583032833067825788434028",
"306250321903663266830678623787727355765",
"85811109450452845716941420752385075013",
"226775650996502459306341144658670477386",
"57671861969212960607280541742419665002",
"309140562236205783584443692790075113088"
]
},
"source": "https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3",
"target": {
"file": "src/wallet/wallet.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:28:22Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/ravenproject/ravencoin",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "25a2dbf4166740270f3ade327aa09ea35ba4e2b2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:ravencoin:ravencoin:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "4.3.2.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v4.3.2.1",
"v4.3.2",
"v4.3.1",
"v4.3.0",
"v4.2.1",
"v4.2.0",
"v4.1.0",
"v4.0.0",
"v3.3.2",
"v3.3.1",
"v3.3.0",
"v2.5.1",
"v2.5.0",
"v2.4.0",
"v2.2.1",
"v2.1.3",
"v2.1.0",
"v2.0.4.1",
"v2.0.4",
"v2.0.3",
"v2.0.2",
"v2.0.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37492.json"
}
}
],
"modified": "2026-10-20T14:28:22.334526096Z",
"provider": "osv",
"references": [
"https://github.com/RavenProject/Ravencoin/issues/1086",
"https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3",
"https://github.com/RavenProject/Ravencoin/blob/master/src/wallet/wallet.cpp#L3657-L3671"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2021-37492",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 389048,
"published_at": "2023-02-07T21:15:09.117+00:00"
}