Lucene search

K
osvGoogleOSV:RUSTSEC-2024-0338
HistoryApr 24, 2024 - 12:00 p.m.

Arithmetic overflows in cosmwasm-std

2024-04-2412:00:00
Google
osv.dev
1
cosmwasm-std
arithmetic overflows
wrong calculations

7.3 High

AI Score

Confidence

Low

Some mathematical operations in cosmwasm-std use wrapping math instead of
panicking on overflow for very big numbers. This can lead to wrong calculations in contracts
that use these operations.

Affected functions:

  • Uint{256,512}::pow / Int{256,512}::pow
  • Int{256,512}::neg

Affected if overflow-checks = true is not set:

  • Uint{64,128}::pow / Int{64,128}::pow
  • Int{64,128}::neg

7.3 High

AI Score

Confidence

Low