CVE-2018-13775

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137767.5The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137777.5The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137787.5The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137797.5The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137807.5The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-137817.5The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-137827.5The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer oveCVE-2018-137837.5The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-137849.1PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.CVE-2018-137856.5In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and CVE-2018-137876.7Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS prograCVE-2018-137897.5An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server