CVE-2018-13690

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Instacocoa, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136917.5The mintToken function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum token, has an inCVE-2018-136927.5The mintToken function of a smart contract implementation for MehdiTAZIToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-136937.5The mintToken function of a smart contract implementation for GreenEnergyToken, an Ethereum token, has an integer overflow that allows the oCVE-2018-136947.5The mintToken function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-136957.5The mint function of a smart contract implementation for CTest7, an Ethereum token, has an integer overflow that allows the owner of the conCVE-2018-136967.5The mintToken function of a smart contract implementation for RedTicket, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136977.5The mintToken function of a smart contract implementation for RobotBTC, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136987.5The mintTokens function of a smart contract implementation for Play2LivePromo, an Ethereum token, has an integer overflow that allows the owCVE-2018-136997.5The mintToken function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow that allows the owCVE-2018-13705.4IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that reCVE-2018-137007.5The mintToken function of a smart contract implementation for IPMCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137017.5The mintToken function of a smart contract implementation for KissMe, an Ethereum token, has an integer overflow that allows the owner of th
CVE-2018-13690: High severity, CVSS 7.5 | Vulnix