CVE-2024-37153: Contract balance not updating correctly after interchain transaction

June 6, 2024

Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.

References

github.com/advisories/GHSA-xgr7-jgq3-mhmc
github.com/evmos/evmos
github.com/evmos/evmos/commit/478b7a62e7af57a70cf3a01126c7f5a89bee69d7
github.com/evmos/evmos/security/advisories/GHSA-xgr7-jgq3-mhmc
nvd.nist.gov/vuln/detail/CVE-2024-37153

Code Behaviors & Features

Detect and mitigate CVE-2024-37153 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →