CVE-2024-58263

LOW

cosmwasm-std 1.3.0-1.4.3 - Integer Overflow in Contract Calculations

Title source: llm

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

Core 3

Core References

Product

Exploit, Patch, Third Party Advisory

Exploit, Third Party Advisory

CVSS v3 3.7

EPSS 0.0040

EPSS Percentile 31.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-190

Status published

Products (2)

cosmwasm/cosmwasm-std 1.3.0 - 1.4.4

crates.io/cosmwasm-std 1.3.0 - 1.4.4crates.io

Published Jul 27, 2025

Tracked Since Feb 18, 2026