CVE-2024-58263

MEDIUM EPSS 33.5%
Published Jul 27, 202511mo ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Medium
Find Similar
Published Jul 27, 2025 11mo ago
Last Modified Jun 17, 2026 2w ago

Description

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

CVSS Details

Base Score
5.3
Exploitability
3.9
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
33.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 3

VendorProductVersionRange
cosmwasmcosmwasm-std*≥1.3.0  –  <1.4.4
cosmwasmcosmwasm-std*≥1.5.0  –  <1.5.4
cosmwasmcosmwasm-std*≥2.0.0  –  <2.0.2

References 3

  • crates.io https://crates.io/crates/cosmwasm-std
    Product
  • github.com https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-002.md
    ExploitPatchThird Party Advisory
  • rustsec.org https://rustsec.org/advisories/RUSTSEC-2024-0338.html
    ExploitThird Party Advisory

Remediation

  • github.com https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-002.md
    ExploitPatchThird Party Advisory