CVE-2013-6638

Currently unrated

Key Information:

Vendor
Google
Status
Chrome
V8
Vendor
CVE Published:
7 December 2013

Summary

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.

References

http://secunia.com/advisories/56217
third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2013-12/msg001...
vendor-advisoryx_refsource_SUSE
http://code.google.com/p/v8/source/detail?r=17800
x_refsource_CONFIRM

EPSS Score

2% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.