CVE-2018-13629

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for CrimsonShilling, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-13635.4IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows usCVE-2018-136307.5The mintToken function of a smart contract implementation for DoccoinPreICO, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136317.5The mintToken function of a smart contract implementation for doccoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136327.5The mintToken function of a smart contract implementation for NEXPARA, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136337.5The mintToken function of a smart contract implementation for Martcoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136347.5The mintToken function of a smart contract implementation for MediaCubeToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-136357.5The mintToken function of a smart contract implementation for HBCM, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-136367.5The mintToken function of a smart contract implementation for TurdCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136377.5The mintToken function of a smart contract implementation for CikkaCoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136387.5The mintToken function of a smart contract implementation for Bitpark, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136397.5The mintToken function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an Ethereum token,CVE-2018-13648.2IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker
CVE-2018-13629: High severity, CVSS 7.5 | Vulnix