CVE-2013-2838
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a...
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
5.0
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Record
CVE-2013-2838- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Record
CVE-2013-2838- Updated
- 2026-11-02
EUVDEUVD-2013-2777 No score
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Record
EUVD-2013-2777- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-98jc-8q2w-5rmh No score
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a...
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Record
GHSA-98jc-8q2w-5rmh- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2013-0194 No score
Updated chromium-browser-stable packages fixes security vulnerabilities
Use-after-free vulnerability in the SVG implementation allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors (CVE-2013-2837).
Google V8, as used in Chromium before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors (CVE-2013-2838).
Chromium before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors (CVE-2013-2839).
Use-after-free vulnerability in the media loader in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors (CVE-2013-2840).
Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources (CVE-2013-2841).
Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets (CVE-2013-2842).
Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data (CVE-2013-2843).
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution (CVE-2013-2844).
The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors (CVE-2013-2845).
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors (CVE-2013-2846).
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors (CVE-2013-2847).
The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors (CVE-2013-2848).
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation (CVE-2013-2849).
The Developer Tools API in Chromium before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors (CVE-2013-2855).
Use-after-free vulnerability in Chromium before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input (CVE-2013-2856).
Use-after-free vulnerability in Chromium before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images (CVE-2013-2857).
Use-after-free vulnerability in the HTML5 Audio implementation in Chromium before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors (CVE-2013-2858).
Chromium before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors (CVE-2013-2859).
Use-after-free vulnerability in Chromium before 27.0.1453.110 allows remote attackers to…
- Record
MGASA-2013-0194- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2838 No score
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Record
UBUNTU-CVE-2013-2838- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:7 From an advisory covering 13 CVEs |
before 27.0.1453.93-1~deb7u1, plus listed versions 26.0.1410.43-1 |
27.0.1453.93-1~deb7u1 |
chromium-browser-stableMageia:2 From an advisory covering 23 CVEs |
before 28.0.1500.45-1.mga2 | 28.0.1500.45-1.mga2 |
chromium-browser-stableMageia:3 From an advisory covering 23 CVEs |
before 28.0.1500.45-1.mga3 | 28.0.1500.45-1.mga3 |
libv8-3.14Ubuntu:16.04:LTS |
All versions, plus listed versions 3.14.5.8-5ubuntu2 |
None known |
libv8-3.14Ubuntu:18.04:LTS |
All versions, plus listed versions 3.14.5.8-11ubuntu1 |
None known |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2838 is a medium vulnerability (CVSS 5.0) in Google Chrome, published May 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
References
code.google.com/p/chromium/issues/detail?id=235311
debian.org/security/2013/dsa-2695
googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16625
nvd.nist.gov/vuln/detail/CVE-2013-2838
github.com/advisories/GHSA-98jc-8q2w-5rmh
Show 194 moreShow less
advisories.mageia.org/MGASA-2013-0194.html
bugs.mageia.org/show_bug.cgi?id=10353
googlechromereleases.blogspot.com/2013/06/stable-channel-update.html
googlechromereleases.blogspot.com/2013/06/stable-channel-update_17.html
debian.org/security/2013/dsa-2706
ubuntu.com/security/CVE-2013-2838
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2836
code.google.com/p/chromium/issues/detail?id=241595
code.google.com/p/chromium/issues/detail?id=236631
code.google.com/p/chromium/issues/detail?id=232865
code.google.com/p/chromium/issues/detail?id=232532
code.google.com/p/chromium/issues/detail?id=232389
code.google.com/p/chromium/issues/detail?id=231725
code.google.com/p/chromium/issues/detail?id=229402
code.google.com/p/chromium/issues/detail?id=227390
code.google.com/p/chromium/issues/detail?id=226659
code.google.com/p/chromium/issues/detail?id=226090
code.google.com/p/chromium/issues/detail?id=226012
code.google.com/p/chromium/issues/detail?id=225979
code.google.com/p/chromium/issues/detail?id=225403
code.google.com/p/chromium/issues/detail?id=224920
code.google.com/p/chromium/issues/detail?id=223145
code.google.com/p/chromium/issues/detail?id=223125
code.google.com/p/chromium/issues/detail?id=223034
code.google.com/p/chromium/issues/detail?id=222770
code.google.com/p/chromium/issues/detail?id=222754
code.google.com/p/chromium/issues/detail?id=222036
code.google.com/p/chromium/issues/detail?id=196648
code.google.com/p/chromium/issues/detail?id=196575
code.google.com/p/chromium/issues/detail?id=196571
code.google.com/p/chromium/issues/detail?id=181438
code.google.com/p/chromium/issues/detail?id=181375
code.google.com/p/chromium/issues/detail?id=180920
code.google.com/p/chromium/issues/detail?id=180058
code.google.com/p/chromium/issues/detail?id=179580
code.google.com/p/chromium/issues/detail?id=178761
code.google.com/p/chromium/issues/detail?id=178581
code.google.com/p/chromium/issues/detail?id=178269
code.google.com/p/chromium/issues/detail?id=178130
code.google.com/p/chromium/issues/detail?id=177815
code.google.com/p/chromium/issues/detail?id=176719
code.google.com/p/chromium/issues/detail?id=174920
code.google.com/p/chromium/issues/detail?id=173672
code.google.com/p/chromium/issues/detail?id=173397
code.google.com/p/chromium/issues/detail?id=170715
code.google.com/p/chromium/issues/detail?id=168050
code.google.com/p/chromium/issues/detail?id=162896
cve.org/CVERecord?id=CVE-2013-2838
suse.com/security/cve/CVE-2011-3015
suse.com/security/cve/CVE-2011-3016
suse.com/security/cve/CVE-2011-3017
suse.com/security/cve/CVE-2011-3018
suse.com/security/cve/CVE-2011-3019
suse.com/security/cve/CVE-2011-3020
suse.com/security/cve/CVE-2011-3021
suse.com/security/cve/CVE-2011-3022
suse.com/security/cve/CVE-2011-3023
suse.com/security/cve/CVE-2011-3024
suse.com/security/cve/CVE-2011-3025
suse.com/security/cve/CVE-2011-3026
suse.com/security/cve/CVE-2011-3027
suse.com/security/cve/CVE-2011-3031
suse.com/security/cve/CVE-2011-3032
suse.com/security/cve/CVE-2011-3033
suse.com/security/cve/CVE-2011-3034
suse.com/security/cve/CVE-2011-3035
suse.com/security/cve/CVE-2011-3036
suse.com/security/cve/CVE-2011-3037
suse.com/security/cve/CVE-2011-3038
suse.com/security/cve/CVE-2011-3039
suse.com/security/cve/CVE-2011-3040
suse.com/security/cve/CVE-2011-3041
suse.com/security/cve/CVE-2011-3042
suse.com/security/cve/CVE-2011-3043
suse.com/security/cve/CVE-2011-3044
suse.com/security/cve/CVE-2011-3045
suse.com/security/cve/CVE-2011-3046
suse.com/security/cve/CVE-2011-3047
suse.com/security/cve/CVE-2011-3049
suse.com/security/cve/CVE-2011-3050
suse.com/security/cve/CVE-2011-3051
suse.com/security/cve/CVE-2011-3052
suse.com/security/cve/CVE-2011-3053
suse.com/security/cve/CVE-2011-3054
suse.com/security/cve/CVE-2011-3055
suse.com/security/cve/CVE-2011-3056
suse.com/security/cve/CVE-2011-3057
suse.com/security/cve/CVE-2011-3058
suse.com/security/cve/CVE-2011-3059
suse.com/security/cve/CVE-2011-3060
suse.com/security/cve/CVE-2011-3061
suse.com/security/cve/CVE-2011-3062
suse.com/security/cve/CVE-2011-3063
suse.com/security/cve/CVE-2011-3064
suse.com/security/cve/CVE-2011-3065
suse.com/security/cve/CVE-2011-3066
suse.com/security/cve/CVE-2011-3067
suse.com/security/cve/CVE-2011-3068
suse.com/security/cve/CVE-2011-3069
suse.com/security/cve/CVE-2011-3070
suse.com/security/cve/CVE-2011-3071
suse.com/security/cve/CVE-2011-3072
suse.com/security/cve/CVE-2011-3073
suse.com/security/cve/CVE-2011-3074
suse.com/security/cve/CVE-2011-3075
suse.com/security/cve/CVE-2011-3076
suse.com/security/cve/CVE-2011-3077
suse.com/security/cve/CVE-2011-3078
suse.com/security/cve/CVE-2011-3079
suse.com/security/cve/CVE-2011-3080
suse.com/security/cve/CVE-2011-3081
suse.com/security/cve/CVE-2011-3083
suse.com/security/cve/CVE-2011-3084
suse.com/security/cve/CVE-2011-3085
suse.com/security/cve/CVE-2011-3086
suse.com/security/cve/CVE-2011-3087
suse.com/security/cve/CVE-2011-3088
suse.com/security/cve/CVE-2011-3089
suse.com/security/cve/CVE-2011-3090
suse.com/security/cve/CVE-2011-3091
suse.com/security/cve/CVE-2011-3092
suse.com/security/cve/CVE-2011-3093
suse.com/security/cve/CVE-2011-3094
suse.com/security/cve/CVE-2011-3095
suse.com/security/cve/CVE-2011-3096
suse.com/security/cve/CVE-2011-3098
suse.com/security/cve/CVE-2011-3100
suse.com/security/cve/CVE-2011-3101
suse.com/security/cve/CVE-2011-3102
suse.com/security/cve/CVE-2011-3903
suse.com/security/cve/CVE-2011-3904
suse.com/security/cve/CVE-2011-3905
suse.com/security/cve/CVE-2011-3906
suse.com/security/cve/CVE-2011-3907
suse.com/security/cve/CVE-2011-3908
suse.com/security/cve/CVE-2011-3909
suse.com/security/cve/CVE-2011-3910
suse.com/security/cve/CVE-2011-3911
suse.com/security/cve/CVE-2011-3912
suse.com/security/cve/CVE-2011-3914
suse.com/security/cve/CVE-2011-3915
suse.com/security/cve/CVE-2011-3916
suse.com/security/cve/CVE-2011-3917
suse.com/security/cve/CVE-2011-3919
suse.com/security/cve/CVE-2011-3921
suse.com/security/cve/CVE-2011-3922
suse.com/security/cve/CVE-2011-3924
suse.com/security/cve/CVE-2011-3925
suse.com/security/cve/CVE-2011-3926
suse.com/security/cve/CVE-2011-3927
suse.com/security/cve/CVE-2011-3928
suse.com/security/cve/CVE-2011-3953
suse.com/security/cve/CVE-2011-3954
suse.com/security/cve/CVE-2011-3955
suse.com/security/cve/CVE-2011-3956
suse.com/security/cve/CVE-2011-3957
suse.com/security/cve/CVE-2011-3958
suse.com/security/cve/CVE-2011-3959
suse.com/security/cve/CVE-2011-3960
suse.com/security/cve/CVE-2011-3961
suse.com/security/cve/CVE-2011-3962
suse.com/security/cve/CVE-2011-3963
suse.com/security/cve/CVE-2011-3964
suse.com/security/cve/CVE-2011-3965
suse.com/security/cve/CVE-2011-3966
suse.com/security/cve/CVE-2011-3967
suse.com/security/cve/CVE-2011-3968
suse.com/security/cve/CVE-2011-3969
suse.com/security/cve/CVE-2011-3970
suse.com/security/cve/CVE-2011-3971
suse.com/security/cve/CVE-2011-3972
suse.com/security/cve/CVE-2012-1521
suse.com/security/cve/CVE-2012-2807
suse.com/security/cve/CVE-2012-2815
suse.com/security/cve/CVE-2012-2816
suse.com/security/cve/CVE-2012-2817
suse.com/security/cve/CVE-2012-2818
suse.com/security/cve/CVE-2012-2819
suse.com/security/cve/CVE-2012-2820
suse.com/security/cve/CVE-2012-2821
suse.com/security/cve/CVE-2012-2823
suse.com/security/cve/CVE-2012-2825
suse.com/security/cve/CVE-2012-2826
suse.com/security/cve/CVE-2012-2829
suse.com/security/cve/CVE-2012-2830
suse.com/security/cve/CVE-2012-2831
suse.com/security/cve/CVE-2012-2834
suse.com/security/cve/CVE-2012-2842
suse.com/security/cve/CVE-2012-2843
suse.com/security/cve/CVE-2012-2865
suse.com/security/cve/CVE-2012-2866
suse.com/security/cve/CVE-2012-2867
suse.com/security/cve/CVE-2012-2868
suse.com/security/cve/CVE-2012-2869
Left out here: 2,186 references and the rest of 1 source description. The JSON record has them.