CVE-2013-6649

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before…

published January 28, 2014

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01501 · 74.1th percentile
Published
2014-01-28T11:00Z
EPSS history
Timeline
  • 28 JAN 11:00Z
    Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before…
    cvelistv5