VULNERABILITY INTELLIGENCE

CVE-2018-13166

CVSS score7.5 HIGH
EPSS probability1.09%
CISA KEVNot currently listed
Published2018-07-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references