Component: wasmd
Criticality: Low (ACMv1: I:Moderate; L:Unlikely)
Patched versions: wasmd 0.52.0

In multiple wasmd message types it was possible to add a large number of addresses which might lead to unexpected resource consumption in ValidateBasic.

See CWA-2024-003 for more details.

References

• GHSA-m3rh-cvr5-x6q4
• CosmWasm/wasmd@76c0c06
• https://github.com/CosmWasm/advisories/blob/main/CWAs/CWA-2024-003.md