Cyber Resilience

CVE-2024-58263

LowPublic PoC

Published: 27 July 2025

Published
27 July 2025
Modified
07 August 2025
KEV Added
—
Patch
—
CVSS Score v3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0024 47.6th percentile
Risk Priority 8 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-58263 is a low-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Cosmwasm Cosmwasm-Std. Its CVSS base score is 3.7 (Low).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 47.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.

CWE(s)
CWE-190

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
attack.mitre.org →
T1565.003 Runtime Data Manipulation Impact
Adversaries may modify systems in order to manipulate the data as it is accessed and displayed to an end user, thus threatening the integrity of the data.
attack.mitre.org →
Why these techniques?

Integer overflows in cosmwasm-std enable crafted inputs to smart contracts (public-facing applications/remote services) causing incorrect calculations, facilitating exploitation (T1190, T1210) and runtime data manipulation (T1565.003).

Affected Assets

cosmwasm
cosmwasm-std
1.3.0 — 1.4.4 · 1.5.0 — 1.5.4 · 2.0.0 — 2.0.2

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References