CVE-2018-13749

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for FinalToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-13757.5IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could leaCVE-2018-137507.5The mintToken function of a smart contract implementation for RichiumToken, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-137517.5The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137527.5The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-137537.5The mintToken function of a smart contract implementation for DeWeiSecurityServiceToken, an Ethereum token, has an integer overflow that allCVE-2018-137547.5The mintToken function of a smart contract implementation for CryptosisToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-137557.5The mintToken function of a smart contract implementation for OTAKUToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137567.5The mintToken function of a smart contract implementation for CherryCoinFoundation, an Ethereum token, has an integer overflow that allows tCVE-2018-137577.5The mintToken function of a smart contract implementation for Coinquer, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137587.5The mintToken function of a smart contract implementation for LoliCoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137597.5The mintToken function of a smart contract implementation for BIGCAdvancedToken, an Ethereum token, has an integer overflow that allows the CVE-2018-13766.1IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb
CVE-2018-13749: High severity, CVSS 7.5 | Vulnix