{"id":"GO-2024-3279","summary":"Mismatched bit-length validation in can lead to panic in cosmossdk.io/math","details":"Mismatched bit-length validation in can lead to panic in cosmossdk.io/math","aliases":["GHSA-7225-m954-23v7"],"modified":"2024-12-12T22:00:04Z","published":"2024-11-21T19:52:52Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2024-3279"},"references":[{"type":"ADVISORY","url":"https://github.com/cosmos/cosmos-sdk/security/advisories/GHSA-7225-m954-23v7"},{"type":"FIX","url":"https://github.com/cosmos/cosmos-sdk/commit/c6522a72a45c34897f9fc85d438c0b74d52f8862"}],"affected":[{"package":{"name":"cosmossdk.io/math","ecosystem":"Go","purl":"pkg:golang/cosmossdk.io/math"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.4.0"}]}],"ecosystem_specific":{"imports":[{"path":"cosmossdk.io/math","symbols":["LegacyDec.Add","LegacyDec.AddMut","LegacyDec.ApproxRoot","LegacyDec.ApproxSqrt","LegacyDec.Ceil","LegacyDec.ImmutOp","LegacyDec.ImmutOpInt","LegacyDec.ImmutOpInt64","LegacyDec.Mul","LegacyDec.MulInt","LegacyDec.MulInt64","LegacyDec.MulInt64Mut","LegacyDec.MulIntMut","LegacyDec.MulMut","LegacyDec.MulRoundUp","LegacyDec.MulRoundUpMut","LegacyDec.MulTruncate","LegacyDec.MulTruncateMut","LegacyDec.Power","LegacyDec.PowerMut","LegacyDec.Quo","LegacyDec.QuoInt","LegacyDec.QuoInt64","LegacyDec.QuoMut","LegacyDec.QuoRoundUp","LegacyDec.QuoRoundupMut","LegacyDec.QuoTruncate","LegacyDec.QuoTruncateMut","LegacyDec.Sub","LegacyDec.SubMut","LegacyDec.Unmarshal","LegacyDec.UnmarshalAmino","LegacyDec.UnmarshalJSON","LegacyDecApproxEq","LegacyMustNewDecFromStr","LegacyNewDecFromStr"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-3279.json"}}],"schema_version":"1.7.3"}