PT-2025-31019 · Unknown · Cosmwasm-Std

Published 2024-04-24 · Updated 2025-08-07 · CVE-2024-58263

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions cosmwasm-std crate versions prior to 2.0.2

Description The cosmwasm-std crate contains an integer overflow issue that can lead to incorrect contract calculations.

Recommendations Update to version 2.0.2 or later.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2024-58263

GHSA-8724-5XMM-W5XQ

GHSA-RM83-PXJX-PR5J

RUSTSEC-2024-0338

Affected Products

Cosmwasm-Std

References · 14

• 🔥 https://rustsec.org/advisories/RUSTSEC-2024-0338.html · Exploit
• https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-002.md · Patch
• https://osv.dev/vulnerability/GHSA-rm83-pxjx-pr5j · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2024-0338 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8724-5xmm-w5xq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58263 · Security Note
• https://osv.dev/vulnerability/CVE-2024-58263 · Vendor Advisory
• https://github.com/CosmWasm/cosmwasm · Note
• https://github.com/CosmWasm/cosmwasm/commit/eff79bcbe73b61178817aacf0a6449437adad6a9 · Note
• https://github.com/CosmWasm/cosmwasm/commit/607e7fc710fb9441096e8edbaa12879b552c8f65 · Note
• https://github.com/CosmWasm/cosmwasm/commit/a6a639e09adc355b5f889a09141649005cb08a46 · Note
• https://crates.io/crates/cosmwasm-std · Note
• https://t.me/cveNotify/131276 · Telegram Post
• https://twitter.com/CVEnew/status/1949571444658069845 · Twitter Post