CVE-2013-6639

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...

7.5 HighFix available

CVE-2013-6639 is a high vulnerability (CVSS 7.5) in Google Chrome, published December 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 77th percentile. Fixed in chromium-browser 31.0.1650.63-1~deb7u1.

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.

Exploit likelihood

1.76%Down 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2013-6639
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-6639
Updated: 2026-11-02

EUVDEUVD-2013-6441 No score

Record: EUVD-2013-6441
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7v9p-w84p-x9qq No score

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...

Record: GHSA-7v9p-w84p-x9qq
Weakness: CWE-119
Updated: 2026-11-02

OSVMGASA-2013-0383 No score

Updated chromium-browser-stable fixes multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities:

Pinkie Pie discovered multiple memory corruption issues (CVE-2013-6632).

Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper (CVE-2013-6634).

cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing commands (CVE-2013-6635).

Bas Venis discovered an address bar spoofing issue (CVE-2013-6636).

The chrome 31 development team discovered and fixed multiple issues with potential security impact (CVE-2013-6637).

Jakob Kummerow of the Chromium project discovered a buffer overflow in the v8 javascript library (CVE-2013-6638).

Jakob Kummerow of the Chromium project discovered an out-of-bounds write in the v8 javascript library (CVE-2013-6639).

Jakob Kummerow of the Chromium project discovered an out-of-bounds read in the v8 javascript library (CVE-2013-6640).

Record: MGASA-2013-0383
Updated: 2026-11-02

OSVMGASA-2014-0007 No score

Updated nodejs package fixes security vulnerabilities

A denial of service flaw was found in the way Node.js handled pipelined HTTP requests. A remote attacker could use this flaw to send an excessive amount of HTTP requests over a network connection, causing Node.js to use an excessive amount of memory and possibly exit when all available memory is exhausted (CVE-2013-4450).

Denial of service issues in the bundled v8 JavaScript library (CVE-2013-6639, CVE-2013-6640).

Record: MGASA-2014-0007
Updated: 2026-11-02

Show 5 moreShow less

OSVopenSUSE-SU-2024:10171-1 No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10171-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10433-1 No score

libv8-5-5.3.171-4.1 on GA media

These are all security issues fixed in the libv8-5-5.3.171-4.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10433-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12948-1
Updated: 2026-11-02

OSVSUSE-SU-2019:14246-1 No score

Security update for Mozilla Firefox

This update contains the Mozilla Firefox ESR 68.2 release.

Mozilla Firefox was updated to ESR 68.2 release:

Enterprise: New administrative policies were added. More information and templates are available at the Policy Templates page.
Various security fixes: MFSA 2019-33 (bsc#1154738)
- CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber
- CVE-2019-11757: Use-after-free when creating index updates in IndexedDB
- CVE-2019-11758: Potentially exploitable crash due to 360 Total Security
- CVE-2019-11759: Stack buffer overflow in HKDF output
- CVE-2019-11760: Stack buffer overflow in WebRTC networking
- CVE-2019-11761: Unintended access to a privileged JSONView object
- CVE-2019-11762: document.domain-based origin isolation has same-origin- property violation
- CVE-2019-11763: Incorrect HTML parsing results in XSS bypass technique
- CVE-2019-11764: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2

Other Issues resolved:

[bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
[bsc#1074235] MozillaFirefox: background tab crash reports sent inadvertently without user opt-in
[bsc#1043008] Firefox hangs randomly when browsing and scrolling
[bsc#1025108] Firefox stops loading page until mouse is moved
[bsc#905528] Firefox malfunctions due to broken omni.ja archives

Record: SUSE-SU-2019:14246-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-6639 No score

Record: UBUNTU-CVE-2013-6639
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`chromium-browser` Debian:7	before 31.0.1650.63-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 19 moreShow less 27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp130.0.1599.101-130.0.1599.101-1~deb7u130.0.1599.101-230.0.1599.101-331.0.1650.57-131.0.1650.57-1~deb7u1	31.0.1650.63-1~deb7u1
`chromium-browser-stable` Mageia:3	before 31.0.1650.63-1.mga3	31.0.1650.63-1.mga3
`chromium-browser-stable` Mageia:3	before 31.0.1650.63-1.mga3.tainted	31.0.1650.63-1.mga3.tainted
`nodejs` Mageia:3	before 0.10.24-1.mga3	0.10.24-1.mga3
`libmongodb` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite_capsule:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`libmongodb` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat

Show 81 moreShow less

Affected packages
Package	Affected	Fixed
`mongodb-debuginfo` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb-server` Red Hat:satellite:6.0::el6	before 0:2.4.6-2.el6sat	0:2.4.6-2.el6sat
`mongodb` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-server` Red Hat:satellite_capsule:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-debuginfo` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-server` Red Hat:satellite:6.0::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`katello` Red Hat:satellite:6.0::el6	before 0:1.5.0-30.el6sat	0:1.5.0-30.el6sat
`katello` Red Hat:satellite:6.0::el7	before 0:1.5.0-30.el7sat	0:1.5.0-30.el7sat
`foreman` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-compute` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-gce` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-libvirt` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-ovirt` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-postgresql` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman-vmware` Red Hat:satellite:6.0::el6	before 0:1.6.0.44-1.el6sat	0:1.6.0.44-1.el6sat
`foreman` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-compute` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-gce` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-libvirt` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-ovirt` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-postgresql` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`foreman-vmware` Red Hat:satellite:6.0::el7	before 0:1.6.0.44-1.el7sat	0:1.6.0.44-1.el7sat
`v8` Red Hat:satellite_capsule:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8-debuginfo` Red Hat:satellite_capsule:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8` Red Hat:satellite:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8-debuginfo` Red Hat:satellite:6.0::el6	before 1:3.14.5.10-9.el6sat	1:3.14.5.10-9.el6sat
`v8` Red Hat:satellite_capsule:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8` Red Hat:satellite:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8-debuginfo` Red Hat:satellite:6.0::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`python-httplib2` Red Hat:satellite_capsule:6.0::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-httplib2` Red Hat:satellite:6.0::el6	before 0:0.7.2-1.el6	0:0.7.2-1.el6
`python-httplib2` Red Hat:satellite_capsule:6.0::el7	before 0:0.6.0-6.el7sat	0:0.6.0-6.el7sat
`python-httplib2` Red Hat:satellite:6.0::el7	before 0:0.6.0-6.el7sat	0:0.6.0-6.el7sat
`foreman-proxy` Red Hat:satellite_capsule:6.0::el6	before 0:1.6.0.30-1.el6sat	0:1.6.0.30-1.el6sat
`foreman-proxy` Red Hat:satellite:6.0::el6	before 0:1.6.0.30-1.el6sat	0:1.6.0.30-1.el6sat
`foreman-proxy` Red Hat:satellite_capsule:6.0::el7	before 0:1.6.0.30-1.el7sat	0:1.6.0.30-1.el7sat
`foreman-proxy` Red Hat:satellite:6.0::el7	before 0:1.6.0.30-1.el7sat	0:1.6.0.30-1.el7sat
`rubygem-kafo` Red Hat:satellite_capsule:6.0::el6	before 0:0.6.4-2.el6sat	0:0.6.4-2.el6sat
`rubygem-kafo_parsers` Red Hat:satellite_capsule:6.0::el6	before 0:0.0.3-2.el6sat	0:0.0.3-2.el6sat
`rubygem-kafo` Red Hat:satellite:6.0::el6	before 0:0.6.4-2.el6sat	0:0.6.4-2.el6sat
`rubygem-kafo_parsers` Red Hat:satellite:6.0::el6	before 0:0.0.3-2.el6sat	0:0.0.3-2.el6sat
`rubygem-kafo` Red Hat:satellite_capsule:6.0::el7	before 0:0.6.4-2.el7sat	0:0.6.4-2.el7sat
`rubygem-kafo_parsers` Red Hat:satellite_capsule:6.0::el7	before 0:0.0.3-2.el7sat	0:0.0.3-2.el7sat
`rubygem-kafo` Red Hat:satellite:6.0::el7	before 0:0.6.4-2.el7sat	0:0.6.4-2.el7sat
`rubygem-kafo_parsers` Red Hat:satellite:6.0::el7	before 0:0.0.3-2.el7sat	0:0.0.3-2.el7sat
`rubygem-hammer_cli_foreman` Red Hat:satellite:6.0::el6	before 0:0.1.1-16.el6sat	0:0.1.1-16.el6sat
`rubygem-hammer_cli_foreman_tasks` Red Hat:satellite:6.0::el6	before 0:0.0.3-3.el6sat	0:0.0.3-3.el6sat
`rubygem-hammer_cli_foreman` Red Hat:satellite:6.0::el7	before 0:0.1.1-16.el7sat	0:0.1.1-16.el7sat
`rubygem-hammer_cli_foreman_tasks` Red Hat:satellite:6.0::el7	before 0:0.0.3-3.el7sat	0:0.0.3-3.el7sat
`python-anyjson` Red Hat:satellite_capsule:6.0::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-anyjson` Red Hat:satellite:6.0::el6	before 0:0.3.3-4.el6sat	0:0.3.3-4.el6sat
`python-anyjson` Red Hat:satellite_capsule:6.0::el7	before 0:0.3.3-5.el7sat	0:0.3.3-5.el7sat
`python-simplejson` Red Hat:satellite_capsule:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-simplejson-debuginfo` Red Hat:satellite_capsule:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-anyjson` Red Hat:satellite:6.0::el7	before 0:0.3.3-5.el7sat	0:0.3.3-5.el7sat
`python-simplejson` Red Hat:satellite:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-simplejson-debuginfo` Red Hat:satellite:6.0::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`v8314-v8` Red Hat:rhel_software_collections:1::el6	before 1:3.14.5.10-6.el6	1:3.14.5.10-6.el6
`v8314-v8-debuginfo` Red Hat:rhel_software_collections:1::el6	before 1:3.14.5.10-6.el6	1:3.14.5.10-6.el6
`v8314-v8-devel` Red Hat:rhel_software_collections:1::el6	before 1:3.14.5.10-6.el6	1:3.14.5.10-6.el6
`v8314-v8` Red Hat:rhel_software_collections:1::el7	before 1:3.14.5.10-6.el7	1:3.14.5.10-6.el7
`v8314-v8-debuginfo` Red Hat:rhel_software_collections:1::el7	before 1:3.14.5.10-6.el7	1:3.14.5.10-6.el7
`v8314-v8-devel` Red Hat:rhel_software_collections:1::el7	before 1:3.14.5.10-6.el7	1:3.14.5.10-6.el7
`MozillaFirefox` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 68.2.0-78.51.4	68.2.0-78.51.4
`MozillaFirefox-branding-SLED` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 68-21.9.8	68-21.9.8
`firefox-atk` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 2.26.1-2.8.4	2.26.1-2.8.4
`firefox-cairo` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 1.15.10-2.13.4	1.15.10-2.13.4
`firefox-gdk-pixbuf` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 2.36.11-2.8.4	2.36.11-2.8.4
`firefox-glib2` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 2.54.3-2.14.7	2.54.3-2.14.7
`firefox-gtk3` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 3.10.9-2.15.3	3.10.9-2.15.3
`firefox-harfbuzz` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 1.7.5-2.7.4	1.7.5-2.7.4
`firefox-libffi` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 3.2.1.git259-2.3.3	3.2.1.git259-2.3.3
`firefox-libffi-gcc5` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 5.3.1+r233831-14.1	5.3.1+r233831-14.1
`firefox-pango` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 1.40.14-2.7.4	1.40.14-2.7.4
`mozilla-nspr` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 4.21-29.6.1	4.21-29.6.1
`mozilla-nss` SUSE:Linux Enterprise Server 11 SP4-LTSS	before 3.45-38.9.3	3.45-38.9.3
`chromium` openSUSE:Tumbleweed	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed	before 113.0.5672.92-1.1	113.0.5672.92-1.1