CVE-2018-11239

HIGH EXPLOITED IN THE WILD

Hexagon - Integer Overflow in _transfer Function

Title source: llm

Exploitation Summary

CVE-2018-11239 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a _to argument in conjunction with a large _value argument, as exploited in the wild in May 2018, aka the "burnOverflow" issue.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://peckshield.com/2018/05/18/burnOverflow/

Scores

CVSS v3 7.5

EPSS 0.0093

EPSS Percentile 55.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

VulnCheck KEV 2018-05-19

InTheWild.io 2018-06-26

CWE

CWE-190

Status published

Products (1)

hexagontoken/hexagon

Published May 19, 2018

Tracked Since Feb 18, 2026