Lucene search

K
osvGoogleOSV:GHSA-8724-5XMM-W5XQ
HistoryApr 24, 2024 - 5:37 p.m.

CosmWasm affected by arithmetic overflows

2024-04-2417:37:59
Google
osv.dev
9
cosmwasm
arithmetic overflow
mathematical operations
contracts
software
overflow-checks.

AI Score

7.3

Confidence

Low

Some mathematical operations in cosmwasm-std use wrapping math instead of
panicking on overflow for very big numbers. This can lead to wrong calculations in contracts
that use these operations.

Affected functions:

  • Uint{256,512}::pow / Int{256,512}::pow
  • Int{256,512}::neg

Affected if overflow-checks = true is not set:

  • Uint{64,128}::pow / Int{64,128}::pow
  • Int{64,128}::neg

AI Score

7.3

Confidence

Low