CVE-2018-13774

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137757.5The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137767.5The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137777.5The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137787.5The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137797.5The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137807.5The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-137817.5The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-137827.5The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer oveCVE-2018-137837.5The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-137849.1PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.CVE-2018-137856.5In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and CVE-2018-137876.7Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS progra
CVE-2018-13774: High severity, CVSS 7.5 | Vulnix