CVE-2018-13563

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for UPayToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135647.5The mintToken function of a smart contract implementation for GATcoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135657.5The mintToken function of a smart contract implementation for Co2Bit, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-135667.5The mintToken function of a smart contract implementation for RETNToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135677.5The mintToken function of a smart contract implementation for SDR, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-135687.5The mintToken function of a smart contract implementation for MktCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135697.5The mintToken function of a smart contract implementation for HitToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135707.5The mint function of a smart contract implementation for kkTestCoin1 (KTC1), an Ethereum token, has an integer overflow that allows the owneCVE-2018-135717.5The mintToken function of a smart contract implementation for GoramCoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135727.5The mintToken function of a smart contract implementation for PGM_Coin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135737.5The mintToken function of a smart contract implementation for TripPay, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135747.5The mintToken function of a smart contract implementation for DataShieldCoin, an Ethereum token, has an integer overflow that allows the ownCVE-2018-135757.5The mintToken function of a smart contract implementation for YESToken, an Ethereum token, has an integer overflow that allows the owner of
CVE-2018-13563: High severity, CVSS 7.5 | Vulnix