CVE-2018-13156

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 5, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-131577.5The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the owCVE-2018-131587.5The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-131597.5The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the ownCVE-2018-13167.5The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directoCVE-2018-131607.5The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the owCVE-2018-131617.5The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the oCVE-2018-131627.5The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-131637.5The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows thCVE-2018-131647.5The mintToken function of a smart contract implementation for EPPCOIN (EPP), an Ethereum token, has an integer overflow that allows the owneCVE-2018-131657.5The mintToken function of a smart contract implementation for JustDCoin (JustD), an Ethereum token, has an integer overflow that allows the CVE-2018-131667.5The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows theCVE-2018-131677.5The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the own
CVE-2018-13156: High severity, CVSS 7.5 | Vulnix