1. Home
  2. CVE Database
  3. CVE-2013-6638
HIGH · 7.5

CVE-2013-6638

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified ot...

Vulnerability Description

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
GoogleChrome<= 31.0.1650.62
GoogleV8<= 3.22.24

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2013-6638?

CVE-2013-6638 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified ot...

How severe is CVE-2013-6638?

CVE-2013-6638 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-6638?

Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Google V8.