CVE-2018-13466: Integer Overflow
The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13466?
CVE-2018-13466 is classified as a high severity vulnerability due to its potential for exploitation in token balance manipulation.
How do I fix CVE-2018-13466?
To fix CVE-2018-13466, developers should implement proper checks to prevent integer overflows in the mintToken function of the smart contract.
Who is affected by CVE-2018-13466?
CVE-2018-13466 affects users and owners of Crystals smart contracts deployed on the Ethereum blockchain.
What is the impact of CVE-2018-13466?
The impact of CVE-2018-13466 allows an attacker to manipulate the token balance of any arbitrary user, potentially leading to financial loss.
Is there a patch available for CVE-2018-13466?
Yes, a patch for CVE-2018-13466 should include modifications to the mintToken function that properly handle integer overflow conditions.