Junglewise Threat Intelligence
GO-2025-3517 - Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go
Severity: info · Published 2025-03-18
Technologies: github.com/cosmos/ibc-go/v6 (Go), github.com/cosmos/ibc-go/v8 (Go), github.com/cosmos/ibc-go/v4 (Go), github.com/cosmos/ibc-go (Go), github.com/cosmos/ibc-go/v3 (Go), github.com/cosmos/ibc-go/v7 (Go), github.com/cosmos/ibc-go/v5 (Go), github.com/cosmos/ibc-go/v2 (Go). Vendors: Go.
Executive brief
Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go
Affected products
- Go github.com/cosmos/ibc-go/v6
- Go github.com/cosmos/ibc-go/v8
- Go github.com/cosmos/ibc-go/v4
- Go github.com/cosmos/ibc-go
- Go github.com/cosmos/ibc-go/v3
- Go github.com/cosmos/ibc-go/v7
- Go github.com/cosmos/ibc-go/v5
- Go github.com/cosmos/ibc-go/v2