Junglewise Threat Intelligence

GO-2025-3517 - Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go

Severity: info · Published 2025-03-18

Technologies: github.com/cosmos/ibc-go/v6 (Go), github.com/cosmos/ibc-go/v8 (Go), github.com/cosmos/ibc-go/v4 (Go), github.com/cosmos/ibc-go (Go), github.com/cosmos/ibc-go/v3 (Go), github.com/cosmos/ibc-go/v7 (Go), github.com/cosmos/ibc-go/v5 (Go), github.com/cosmos/ibc-go/v2 (Go). Vendors: Go.

Executive brief

Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt in github.com/cosmos/ibc-go

Affected products

  • Go github.com/cosmos/ibc-go/v6
  • Go github.com/cosmos/ibc-go/v8
  • Go github.com/cosmos/ibc-go/v4
  • Go github.com/cosmos/ibc-go
  • Go github.com/cosmos/ibc-go/v3
  • Go github.com/cosmos/ibc-go/v7
  • Go github.com/cosmos/ibc-go/v5
  • Go github.com/cosmos/ibc-go/v2

Related threats