-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/CosmWasm/wasmd | go | < 0.52 | 0.52 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from address validation functions (assertValidAddresses/checkDuplicatedAddresses) lacking maximum size checks. These were used in multiple message types' ValidateBasic methods. The patch replaced them with validateBech32Addresses that adds MaxAddressCount (50) validation. The affected functions identified: 1) AccessConfig.ValidateBasic handled contract permissions, 2) MsgAdd/RemoveCodeUploadParamsAddresses managed parameter changes - all critical paths for address list processing without size constraints pre-patch.