CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2024-58263
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cosmwasm:cosmwasm-std
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8724-5xmm-w5xq | crates.io | cosmwasm-std | >=1.3.0 <1.4.4 | 1.4.4 |
| GHSA-8724-5xmm-w5xq | crates.io | cosmwasm-std | >=1.5.0 <1.5.4 | 1.5.4 |
| GHSA-8724-5xmm-w5xq | crates.io | cosmwasm-std | >=2.0.0 <2.0.2 | 2.0.2 |
| RUSTSEC-2024-0338 | crates.io | cosmwasm-std | >=1.3.0 <1.4.4 >=1.5.0 <1.5.4 >=2.0.0 <2.0.2 | 1.4.4, 1.5.4, 2.0.2 |