Read the docs
TI-2013-02479 Aliases CVE-2013-2837GHSA-2vpx-p529-jx74

Use-after-free vulnerability in the SVG implementation in Google Chrome before…

Priority LOW 35CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Why it matters now

EPSS 0.01081 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 71

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 27.0.1453.91VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.0:*:*:*:*:*:*:*27.0.1453.0VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.1:*:*:*:*:*:*:*27.0.1453.1VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.2:*:*:*:*:*:*:*27.0.1453.2VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.3:*:*:*:*:*:*:*27.0.1453.3VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.4:*:*:*:*:*:*:*27.0.1453.4VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.5:*:*:*:*:*:*:*27.0.1453.5VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.6:*:*:*:*:*:*:*27.0.1453.6VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.7:*:*:*:*:*:*:*27.0.1453.7VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.8:*:*:*:*:*:*:*27.0.1453.8VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 27.0.1453.91 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.0:*:*:*:*:*:*:* Versions 27.0.1453.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.1:*:*:*:*:*:*:* Versions 27.0.1453.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.2:*:*:*:*:*:*:* Versions 27.0.1453.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.3:*:*:*:*:*:*:* Versions 27.0.1453.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.4:*:*:*:*:*:*:* Versions 27.0.1453.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.5:*:*:*:*:*:*:* Versions 27.0.1453.5 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.6:*:*:*:*:*:*:* Versions 27.0.1453.6 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.7:*:*:*:*:*:*:* Versions 27.0.1453.7 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.8:*:*:*:*:*:*:* Versions 27.0.1453.8 Vulnerable ·Google
Show 61 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:27.0.1453.9:*:*:*:*:*:*:*27.0.1453.9VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.10:*:*:*:*:*:*:*27.0.1453.10VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.11:*:*:*:*:*:*:*27.0.1453.11VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.12:*:*:*:*:*:*:*27.0.1453.12VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.13:*:*:*:*:*:*:*27.0.1453.13VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.15:*:*:*:*:*:*:*27.0.1453.15VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.34:*:*:*:*:*:*:*27.0.1453.34VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.35:*:*:*:*:*:*:*27.0.1453.35VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.36:*:*:*:*:*:*:*27.0.1453.36VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.37:*:*:*:*:*:*:*27.0.1453.37VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.38:*:*:*:*:*:*:*27.0.1453.38VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.39:*:*:*:*:*:*:*27.0.1453.39VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.40:*:*:*:*:*:*:*27.0.1453.40VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.41:*:*:*:*:*:*:*27.0.1453.41VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.42:*:*:*:*:*:*:*27.0.1453.42VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.43:*:*:*:*:*:*:*27.0.1453.43VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.44:*:*:*:*:*:*:*27.0.1453.44VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.45:*:*:*:*:*:*:*27.0.1453.45VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.46:*:*:*:*:*:*:*27.0.1453.46VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.47:*:*:*:*:*:*:*27.0.1453.47VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.49:*:*:*:*:*:*:*27.0.1453.49VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.50:*:*:*:*:*:*:*27.0.1453.50VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.51:*:*:*:*:*:*:*27.0.1453.51VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.52:*:*:*:*:*:*:*27.0.1453.52VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.54:*:*:*:*:*:*:*27.0.1453.54VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.55:*:*:*:*:*:*:*27.0.1453.55VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.56:*:*:*:*:*:*:*27.0.1453.56VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.57:*:*:*:*:*:*:*27.0.1453.57VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.58:*:*:*:*:*:*:*27.0.1453.58VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.59:*:*:*:*:*:*:*27.0.1453.59VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.60:*:*:*:*:*:*:*27.0.1453.60VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.61:*:*:*:*:*:*:*27.0.1453.61VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.62:*:*:*:*:*:*:*27.0.1453.62VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.63:*:*:*:*:*:*:*27.0.1453.63VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.64:*:*:*:*:*:*:*27.0.1453.64VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.65:*:*:*:*:*:*:*27.0.1453.65VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.66:*:*:*:*:*:*:*27.0.1453.66VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.67:*:*:*:*:*:*:*27.0.1453.67VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.68:*:*:*:*:*:*:*27.0.1453.68VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.69:*:*:*:*:*:*:*27.0.1453.69VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.70:*:*:*:*:*:*:*27.0.1453.70VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.71:*:*:*:*:*:*:*27.0.1453.71VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.72:*:*:*:*:*:*:*27.0.1453.72VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.73:*:*:*:*:*:*:*27.0.1453.73VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.74:*:*:*:*:*:*:*27.0.1453.74VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.75:*:*:*:*:*:*:*27.0.1453.75VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.76:*:*:*:*:*:*:*27.0.1453.76VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.77:*:*:*:*:*:*:*27.0.1453.77VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.78:*:*:*:*:*:*:*27.0.1453.78VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.79:*:*:*:*:*:*:*27.0.1453.79VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.80:*:*:*:*:*:*:*27.0.1453.80VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.81:*:*:*:*:*:*:*27.0.1453.81VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.82:*:*:*:*:*:*:*27.0.1453.82VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.83:*:*:*:*:*:*:*27.0.1453.83VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.84:*:*:*:*:*:*:*27.0.1453.84VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.85:*:*:*:*:*:*:*27.0.1453.85VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.86:*:*:*:*:*:*:*27.0.1453.86VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.87:*:*:*:*:*:*:*27.0.1453.87VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.88:*:*:*:*:*:*:*27.0.1453.88VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.89:*:*:*:*:*:*:*27.0.1453.89VulnerableGoogle
cpe:2.3:a:google:chrome:27.0.1453.90:*:*:*:*:*:*:*27.0.1453.90VulnerableGoogle
  • cpe:2.3:a:google:chrome:27.0.1453.9:*:*:*:*:*:*:* Versions 27.0.1453.9 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.10:*:*:*:*:*:*:* Versions 27.0.1453.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.11:*:*:*:*:*:*:* Versions 27.0.1453.11 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.12:*:*:*:*:*:*:* Versions 27.0.1453.12 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.13:*:*:*:*:*:*:* Versions 27.0.1453.13 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.15:*:*:*:*:*:*:* Versions 27.0.1453.15 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.34:*:*:*:*:*:*:* Versions 27.0.1453.34 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.35:*:*:*:*:*:*:* Versions 27.0.1453.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.36:*:*:*:*:*:*:* Versions 27.0.1453.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.37:*:*:*:*:*:*:* Versions 27.0.1453.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.38:*:*:*:*:*:*:* Versions 27.0.1453.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.39:*:*:*:*:*:*:* Versions 27.0.1453.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.40:*:*:*:*:*:*:* Versions 27.0.1453.40 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.41:*:*:*:*:*:*:* Versions 27.0.1453.41 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.42:*:*:*:*:*:*:* Versions 27.0.1453.42 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.43:*:*:*:*:*:*:* Versions 27.0.1453.43 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.44:*:*:*:*:*:*:* Versions 27.0.1453.44 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.45:*:*:*:*:*:*:* Versions 27.0.1453.45 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.46:*:*:*:*:*:*:* Versions 27.0.1453.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.47:*:*:*:*:*:*:* Versions 27.0.1453.47 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.49:*:*:*:*:*:*:* Versions 27.0.1453.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.50:*:*:*:*:*:*:* Versions 27.0.1453.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.51:*:*:*:*:*:*:* Versions 27.0.1453.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.52:*:*:*:*:*:*:* Versions 27.0.1453.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.54:*:*:*:*:*:*:* Versions 27.0.1453.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.55:*:*:*:*:*:*:* Versions 27.0.1453.55 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.56:*:*:*:*:*:*:* Versions 27.0.1453.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.57:*:*:*:*:*:*:* Versions 27.0.1453.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.58:*:*:*:*:*:*:* Versions 27.0.1453.58 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.59:*:*:*:*:*:*:* Versions 27.0.1453.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.60:*:*:*:*:*:*:* Versions 27.0.1453.60 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.61:*:*:*:*:*:*:* Versions 27.0.1453.61 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.62:*:*:*:*:*:*:* Versions 27.0.1453.62 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.63:*:*:*:*:*:*:* Versions 27.0.1453.63 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.64:*:*:*:*:*:*:* Versions 27.0.1453.64 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.65:*:*:*:*:*:*:* Versions 27.0.1453.65 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.66:*:*:*:*:*:*:* Versions 27.0.1453.66 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.67:*:*:*:*:*:*:* Versions 27.0.1453.67 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.68:*:*:*:*:*:*:* Versions 27.0.1453.68 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.69:*:*:*:*:*:*:* Versions 27.0.1453.69 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.70:*:*:*:*:*:*:* Versions 27.0.1453.70 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.71:*:*:*:*:*:*:* Versions 27.0.1453.71 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.72:*:*:*:*:*:*:* Versions 27.0.1453.72 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.73:*:*:*:*:*:*:* Versions 27.0.1453.73 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.74:*:*:*:*:*:*:* Versions 27.0.1453.74 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.75:*:*:*:*:*:*:* Versions 27.0.1453.75 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.76:*:*:*:*:*:*:* Versions 27.0.1453.76 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.77:*:*:*:*:*:*:* Versions 27.0.1453.77 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.78:*:*:*:*:*:*:* Versions 27.0.1453.78 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.79:*:*:*:*:*:*:* Versions 27.0.1453.79 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.80:*:*:*:*:*:*:* Versions 27.0.1453.80 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.81:*:*:*:*:*:*:* Versions 27.0.1453.81 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.82:*:*:*:*:*:*:* Versions 27.0.1453.82 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.83:*:*:*:*:*:*:* Versions 27.0.1453.83 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.84:*:*:*:*:*:*:* Versions 27.0.1453.84 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.85:*:*:*:*:*:*:* Versions 27.0.1453.85 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.86:*:*:*:*:*:*:* Versions 27.0.1453.86 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.87:*:*:*:*:*:*:* Versions 27.0.1453.87 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.88:*:*:*:*:*:*:* Versions 27.0.1453.88 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.89:*:*:*:*:*:*:* Versions 27.0.1453.89 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:27.0.1453.90:*:*:*:*:*:*:* Versions 27.0.1453.90 Vulnerable ·Google

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2837
  2. 2026-10-03 Alias added: GHSA-2vpx-p529-jx74

References

Advisory 1

Other 3

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences