First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2018-13509

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for IamRich, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.mdThird Party Advisory
https://github.com/BlockChainsSecurity/EtherTokens/tree/master/IamRichThird Party Advisory
https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.mdThird Party Advisory
https://github.com/BlockChainsSecurity/EtherTokens/tree/master/IamRichThird Party Advisory

Timeline

Published: Jul 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-13514.8A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascri CVE-2018-135107.5The mintToken function of a smart contract implementation for Welfare Token Fund (WTF), an Ethereum token, has an integer overflow that allo CVE-2018-135117.5The mintToken function of a smart contract implementation for CorelliCoin, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135127.5The mintToken function of a smart contract implementation for SmartHomeCoin, an Ethereum token, has an integer overflow that allows the owne CVE-2018-135137.5The mintToken function of a smart contract implementation for Ubiou, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-135147.5The mintToken function of a smart contract implementation for esportz, an Ethereum token, has an integer overflow that allows the owner of t CVE-2018-135157.5The mintToken function of a smart contract implementation for aman, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-135167.5The mintToken function of a smart contract implementation for Super Cool Awesome Money (SCAM), an Ethereum token, has an integer overflow th CVE-2018-135177.5The mintToken function of a smart contract implementation for C3 Token (C3), an Ethereum token, has an integer overflow that allows the owne CVE-2018-135187.5The mintToken function of a smart contract implementation for TCash, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-135197.5The mint function of a smart contract implementation for DigitalCloudToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-13529.8A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variab