CVE-2018-13146

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 4, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-13153.7In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server canCVE-2018-131536.5In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.CVE-2018-131557.5The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the ownCVE-2018-131567.5The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the oCVE-2018-131577.5The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the owCVE-2018-131587.5The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-131597.5The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the ownCVE-2018-13167.5The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directoCVE-2018-131607.5The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the owCVE-2018-131617.5The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the oCVE-2018-131627.5The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-131637.5The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows th
CVE-2018-13146: High severity, CVSS 7.5 | Vulnix