Read the docs
TI-2024-39010 Aliases GHSA-g8w7-7vgg-x7xg

CWA-2024-005: Stackoverflow in wasmd

Priority LOW 38CWE-121Published · Updated

Key facts

Attack vector
—
Privileges required
—
User interaction
—
Attack complexity
—
Impact type
—
Confidentiality · integrity · availability
—
Fix status
Fixed

No CVSS vector from any source. Fix status from GitHub.

Summary

**Component:** wasmd **Criticality:** High ([ACMv1](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md): I:Critical; L:Likely) **Patched versions:** wasmd 0.53.0, 0.46.0 See [CWA-2024-005](https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-005.md) for more details.

Why it matters now

Fix Fixed github.com/CosmWasm/wasmd (Go): 0.53.0, 0.46.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—github.com/CosmWasm/wasmd (Go)0.50.0 to before 0.53.00.53.0Patch availableGHSA-g8w7-7vgg-x7xg
—github.com/CosmWasm/wasmd (Go)before 0.46.00.46.0Patch availableGHSA-g8w7-7vgg-x7xg
  • github.com/CosmWasm/wasmd (Go) Vendor— Affected 0.50.0 to before 0.53.0 Fixed in 0.53.0 Patch available GHSA-g8w7-7vgg-x7xg
  • github.com/CosmWasm/wasmd (Go) Vendor— Affected before 0.46.0 Fixed in 0.46.0 Patch available GHSA-g8w7-7vgg-x7xg

Remediation

  • Fix · GHSA-g8w7-7vgg-x7xg github.com/CosmWasm/wasmd (Go) Fixed in 0.53.0 Advisory →
  • Fix · GHSA-g8w7-7vgg-x7xg github.com/CosmWasm/wasmd (Go) Fixed in 0.46.0 Advisory →

Timeline

  1. 2026-10-03 Threatist record created from GHSA-g8w7-7vgg-x7xg

References

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences