GitHub Advisoryadvisory · Go

GHSA-m3rh-cvr5-x6q4 CosmWasm wasmd has large address count in ValidateBasic

MEDIUM Published 2024-08-08 Modified 2026-07-06 Official page ↗
Ecosystem
Go
Packages
github.com/CosmWasm/wasmd
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-400
Reviewed
2024-08-08

Affected packages

• Go github.com/CosmWasm/wasmd: < 0.52.0 → fixed in 0.52.0

Description

Component: wasmd Criticality: Low (ACMv1: I:Moderate; L:Unlikely) Patched versions: wasmd 0.52.0 In multiple wasmd message types it was possible to add a large number of addresses which might lead to unexpected resource consumption in ValidateBasic. See CWA-2024-003 for more details.

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References