CVE-2018-13648

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for BGC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136497.5The mintToken function of a smart contract implementation for Deploy, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-136507.5The mintToken function of a smart contract implementation for BitmaxerToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136517.5The mintToken function of a smart contract implementation for MicoinNetworkToken, an Ethereum token, has an integer overflow that allows theCVE-2018-136527.5The mintToken function of a smart contract implementation for TheGoDigital, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-136537.5The mintToken function of a smart contract implementation for ipshoots, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136547.5The mintToken function of a smart contract implementation for ESTSToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136557.5The mintToken function of a smart contract implementation for GFC, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136567.5The mintToken function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethereum token, has aCVE-2018-136577.5The mintToken function of a smart contract implementation for Rice, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-136587.5The mintToken function of a smart contract implementation for TheGoDgital, an Ethereum token, has an integer overflow that allows the owner CVE-2018-136597.5The mintToken function of a smart contract implementation for BrianCoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-13667.8IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to ex
CVE-2018-13648: High severity, CVSS 7.5 | Vulnix