GHSA-g8w7-7vgg-x7xg

CWA-2024-005: Stackoverflow in wasmd

8.7 HighFix available

GHSA-g8w7-7vgg-x7xg is a high vulnerability (CVSS 8.7) in github.com/CosmWasm/wasmd, published August 21, 2024. No source lists public exploit code. Fixed in github.com/CosmWasm/wasmd 0.53.0.

What does this mean?

Severity: 8.7 HighCVSS 4.0, GitHub Advisories
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 0.53.0github.com/CosmWasm/wasmd +2 more

Description

Component: wasmd Criticality: High (ACMv1: I:Critical; L:Likely) Patched versions: wasmd 0.53.0, 0.46.0

See CWA-2024-005 for more details.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Affected packages

Affected packages
Package	Affected	Fixed
`github.com/CosmWasm/wasmd` Go	0.50.0 up to 0.53.0	0.53.0
`github.com/CosmWasm/wasmd` Go	before 0.46.0	0.46.0
`github.com/CosmWasm/wasmd` Go	before 0.46.0, 0.50.0 up to 0.53.0	0.46.00.53.0

What each source reports

GitHub Advisories Score used8.7

CWA-2024-005: Stackoverflow in wasmd

Component: wasmd Criticality: High (ACMv1: I:Critical; L:Likely) Patched versions: wasmd 0.53.0, 0.46.0

See CWA-2024-005 for more details.

Record: GHSA-g8w7-7vgg-x7xg
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

OSV8.7

CWA-2024-005: Stackoverflow in wasmd

Component: wasmd Criticality: High (ACMv1: I:Critical; L:Likely) Patched versions: wasmd 0.53.0, 0.46.0

See CWA-2024-005 for more details.

Record: GHSA-g8w7-7vgg-x7xg
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-121
Updated: 2026-11-02

OSVGO-2024-3082No score

CWA-2024-005: Stackoverflow in wasmd in github.com/CosmWasm/wasmd

CWA-2024-005: Stackoverflow in wasmd in github.com/CosmWasm/wasmd

Record: GO-2024-3082
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	GitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

Description

Attack profile

How easy it is to exploit

What an attacker can affect

Affected packages

What each source reports

History

References