CVE-2018-13167

The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.09% chance of exploitation in the next 30 days, 63th percentile

Published

2018-07-05

Updated

2024-08-05

Proof-of-concept exploits (1)

• BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md

References

• CVE Record
• NVD entry

Related

• CVE-2018-13166
• CVE-2018-13168
• CVE-2018-13165
• CVE-2018-13169
• CVE-2018-13164
• CVE-2018-13170