DA0-DA0 / polytone

An account on every blockchain for every smart contract.
45 stars 7 forks source link

RUSTSEC-2024-0338: Arithmetic overflows in cosmwasm-std #60

Open github-actions[bot] opened 5 months ago

github-actions[bot] commented 5 months ago

Arithmetic overflows in cosmwasm-std

Details
Package cosmwasm-std
Version 1.5.2
URL https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-002.md
Date 2024-04-24
Patched versions >=1.4.4, <1.5.0,>=1.5.4, <2.0.0,>=2.0.2
Unaffected versions <1.3.0

Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations.

Affected functions:

Affected if overflow-checks = true is not set:

See advisory page for additional details.