CVE-2018-13491

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Carrot, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-134927.5The mintToken function of a smart contract implementation for naga, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-134937.5The mintToken function of a smart contract implementation for DaddyToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-134947.5The mintToken function of a smart contract implementation for SusanTokenERC20, an Ethereum token, has an integer overflow that allows the owCVE-2018-134957.5The mintToken function of a smart contract implementation for KMCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134967.5The mintToken function of a smart contract implementation for RajTestICO, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-134977.5The mintToken function of a smart contract implementation for COBToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-134987.5The mintToken function of a smart contract implementation for KAPAYcoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-134997.5The mintToken function of a smart contract implementation for Crowdsale, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-13505.3The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.CVE-2018-135007.5The mintToken function of a smart contract implementation for MSXAdvanced, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135017.5The mintToken function of a smart contract implementation for HRWtoken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135027.5The mintToken function of a smart contract implementation for HeliumNetwork, an Ethereum token, has an integer overflow that allows the owne
CVE-2018-13491: High severity, CVSS 7.5 | Vulnix