CVE-2018-13470

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-134717.5The mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token, has an integer overflow that allows the owCVE-2018-134727.5The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-134737.5The mintToken function of a smart contract implementation for ohni_2 (OHNI), an Ethereum token, has an integer overflow that allows the owneCVE-2018-134747.5The mintToken function of a smart contract implementation for FansChainToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-134757.5The mintToken function of a smart contract implementation for VSCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134767.5The mintToken function of a smart contract implementation for PhilCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134777.5The mintToken function of a smart contract implementation for CTESale, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-134787.5The mintToken function of a smart contract implementation for DMPToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134797.5The mintToken function of a smart contract implementation for SlidebitsToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-13487.4NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.CVE-2018-134807.5The mintToken function of a smart contract implementation for QRG, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-134817.5The mintToken function of a smart contract implementation for TRIUM, an Ethereum token, has an integer overflow that allows the owner of the
CVE-2018-13470: High severity, CVSS 7.5 | Vulnix