CVE-2018-13536

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for ERC20_ICO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135377.5The mintToken function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow that allows the owneCVE-2018-135387.5The mintToken function of a smart contract implementation for SIPCToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135397.5The mintToken function of a smart contract implementation for Bcxss, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-13546.5An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versCVE-2018-135407.5The mintToken function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-135417.5The mintToken function of a smart contract implementation for CryptoLeu, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135427.5The mintToken function of a smart contract implementation for ZIBToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135437.5The mintToken function of a smart contract implementation for GemstoneToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-135447.5The mintToken function of a smart contract implementation for Numisma, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135457.5The mintToken function of a smart contract implementation for HashShield, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-135467.5The mintToken function of a smart contract implementation for CCASH, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-135477.5The mintToken function of a smart contract implementation for Providence Crypto Casino (PVE) (Contract Name: ProvidenceCasinoToken), an Ethe
CVE-2018-13536: High severity, CVSS 7.5 | Vulnix