CVE-2013-6632
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute...
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.
- Record
CVE-2013-6632- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.
- Record
CVE-2013-6632- Updated
- 2026-11-02
EUVDEUVD-2013-6434 No score
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.
- Record
EUVD-2013-6434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grmv-75gc-629v No score
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute...
Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.
- Record
GHSA-grmv-75gc-629v- Updated
- 2026-11-02
OSVMGASA-2013-0383 No score
Updated chromium-browser-stable fixes multiple vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities:
Pinkie Pie discovered multiple memory corruption issues (CVE-2013-6632).
Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper (CVE-2013-6634).
cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing commands (CVE-2013-6635).
Bas Venis discovered an address bar spoofing issue (CVE-2013-6636).
The chrome 31 development team discovered and fixed multiple issues with potential security impact (CVE-2013-6637).
Jakob Kummerow of the Chromium project discovered a buffer overflow in the v8 javascript library (CVE-2013-6638).
Jakob Kummerow of the Chromium project discovered an out-of-bounds write in the v8 javascript library (CVE-2013-6639).
Jakob Kummerow of the Chromium project discovered an out-of-bounds read in the v8 javascript library (CVE-2013-6640).
- Record
MGASA-2013-0383- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:7 From an advisory covering 14 CVEs |
before 31.0.1650.57-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 17 moreShow less27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp130.0.1599.101-130.0.1599.101-1~deb7u130.0.1599.101-230.0.1599.101-3 |
31.0.1650.57-1~deb7u1 |
chromium-browser-stableMageia:3 From an advisory covering 8 CVEs |
before 31.0.1650.63-1.mga3 | 31.0.1650.63-1.mga3 |
chromium-browser-stableMageia:3 From an advisory covering 8 CVEs |
before 31.0.1650.63-1.mga3.tainted | 31.0.1650.63-1.mga3.tainted |
chromiumopenSUSE:Tumbleweed From an advisory covering 719 CVEs |
before 55.0.2883.75-3.1 | 55.0.2883.75-3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6632 is a high vulnerability (CVSS 9.3) in Google Chrome, published November 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.09%, the 93rd percentile. No source names a fixed version.
References
code.google.com/p/chromium/issues/detail?id=319125
lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls
googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html
Show 194 moreShow less
debian.org/security/2013/dsa-2799
nvd.nist.gov/vuln/detail/CVE-2013-6632
github.com/advisories/GHSA-grmv-75gc-629v
advisories.mageia.org/MGASA-2013-0383.html
bugs.mageia.org/show_bug.cgi?id=11935
suse.com/security/cve/CVE-2011-3015
Left out here: 2,148 references. The JSON record has them.