CVE-2018-16733: Ethereum Go Ethereum

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

Affected products

• Ethereum Go Ethereum: before 1.8.14 (fixed in 1.8.14)

Published 2018-09-08. Last modified 2026-06-17.