CVE-2018-13708

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Order (ETH) (Contract Name: BuyToken), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137097.5The mintToken function of a smart contract implementation for Tube, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-13716.5An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process CVE-2018-137107.5The mintToken function of a smart contract implementation for Mjolnir, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137117.5The mintToken function of a smart contract implementation for Databits, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137127.5The mintToken function of a smart contract implementation for PMET, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-137137.5The mintToken function of a smart contract implementation for Tradesman, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137147.5The mintToken function of a smart contract implementation for CM, an Ethereum token, has an integer overflow that allows the owner of the coCVE-2018-137157.5The mintToken function of a smart contract implementation for BpsToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137167.5The mintToken function of a smart contract implementation for sexhdsolo, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137177.5The mintToken function of a smart contract implementation for HormitechToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137187.5The mintToken function of a smart contract implementation for FuturXe, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137197.5The mintToken function of a smart contract implementation for BiteduToken, an Ethereum token, has an integer overflow that allows the owner