Skip to content
OpenAdvisories
Low · 3.7 CVE-2024-58263 EUVD-2024-54822GHSA-8724-5xmm-w5xqRUSTSEC-2024-0338

CosmWasm affected by arithmetic overflows

Published Jul 27, 2025 · Updated Jul 28, 2025 · Assigned by mitre

Vendor: CosmWasm Product: cosmwasm-std Package: cosmwasm-std Ecosystem: crates.io

Description

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

Affected products

VendorProductAffectedFixed
CosmWasm cosmwasm-std 1.3.0 – < 1.4.4, 1.5.0 – < 1.5.4, 2.0.0 – < 2.0.2 1.4.4

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io cosmwasm-std >= 1.3.0, < 1.4.4 1.4.4 GHSA-8724-5xmm-w5xq
crates.io cosmwasm-std >= 1.5.0, < 1.5.4 1.5.4 GHSA-8724-5xmm-w5xq
crates.io cosmwasm-std >= 2.0.0, < 2.0.2 2.0.2 GHSA-8724-5xmm-w5xq
crates.io cosmwasm-std >= 1.3.0, < 1.4.4 · >= 1.5.0, < 1.5.4 · >= 2.0.0, < 2.0.2 1.4.4, 1.5.4, 2.0.2 RUSTSEC-2024-0338

References