Executive brief
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
Affected products
- Go github.com/cosmos/cosmos-sdk
Junglewise Threat Intelligence
ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions
Severity: low · CVSS 3.1 · Published 2024-03-12
Technologies: github.com/cosmos/cosmos-sdk (Go). Vendors: Go.
Related threats
- GO-2025-3803 - Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk
- GO-2025-3516 - Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
- GO-2025-3476 - Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
- GO-2024-3339 - Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk
- GO-2024-2572 - Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk