CVE-2011-3064

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to...

7.5 High

CVE-2011-3064 is a high vulnerability (CVSS 7.5) in Google Chrome, published March 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 83rd percentile. No source names a fixed version.

What does this mean?

Severity: 7.5 HighCVSS 2.0, NVD
Exploit chance: 2.24%EPSS, 83rd percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

Exploit likelihood

2.24%Down 1.5 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`chromium` openSUSE:Tumbleweed From an advisory covering 719 CVEs	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed From an advisory covering 2310 CVEs	before 113.0.5672.92-1.1	113.0.5672.92-1.1

What each source reports

NVD Score used7.5

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

Record: CVE-2011-3064
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-416
Updated: 2026-11-02

CVE ListNo score

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

Record: CVE-2011-3064
Updated: 2026-11-02

EUVDEUVD-2011-3032No score

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

Record: EUVD-2011-3032
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fc76-wjg5-5742No score

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to...

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

Record: GHSA-fc76-wjg5-5742
Weakness: CWE-416
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.