CVE-2018-13656

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136577.5The mintToken function of a smart contract implementation for Rice, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-136587.5The mintToken function of a smart contract implementation for TheGoDgital, an Ethereum token, has an integer overflow that allows the owner CVE-2018-136597.5The mintToken function of a smart contract implementation for BrianCoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-13667.8IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exCVE-2018-136607.5The mint function of a smart contract implementation for BillionRewardsToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-136617.5The mintToken function of a smart contract implementation for APP, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136627.5The mintToken function of a smart contract implementation for WorldOpctionChain, an Ethereum token, has an integer overflow that allows the CVE-2018-136637.5The mintToken function of a smart contract implementation for BSCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136647.5The mintToken function of a smart contract implementation for CWS, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136657.5The mintToken function of a smart contract implementation for BCaaS, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-136667.5The mintToken function of a smart contract implementation for EristicaICO, an Ethereum token, has an integer overflow that allows the owner CVE-2018-136677.5The mintToken function of a smart contract implementation for UTBTokenTest, an Ethereum token, has an integer overflow that allows the owner
CVE-2018-13656: High severity, CVSS 7.5 | Vulnix