LOW 3.7 Go

CosmWasm wasmd has large address count in ValidateBasic

GHSA-m3rh-cvr5-x6q4 · GO-2024-3059

Published · Modified

Description

Component: wasmd
Criticality: Low (ACMv1: I:Moderate; L:Unlikely)
Patched versions: wasmd 0.52.0

In multiple wasmd message types it was possible to add a large number of addresses which might lead to unexpected resource consumption in ValidateBasic.

See CWA-2024-003 for more details.

Ready to move

Start Securing

Free, no credit card | First findings in minutes