Read the docs
TI-2013-02544 Aliases CVE-2013-2902GHSA-g2xj-3jcv-jw82

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink…

Priority LOW 35CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.

Why it matters now

EPSS 0.01272 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 52

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 29.0.1547.56VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.0:*:*:*:*:*:*:*29.0.1547.0VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.1:*:*:*:*:*:*:*29.0.1547.1VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.2:*:*:*:*:*:*:*29.0.1547.2VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.3:*:*:*:*:*:*:*29.0.1547.3VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.4:*:*:*:*:*:*:*29.0.1547.4VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.5:*:*:*:*:*:*:*29.0.1547.5VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.7:*:*:*:*:*:*:*29.0.1547.7VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.8:*:*:*:*:*:*:*29.0.1547.8VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.9:*:*:*:*:*:*:*29.0.1547.9VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 29.0.1547.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.0:*:*:*:*:*:*:* Versions 29.0.1547.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.1:*:*:*:*:*:*:* Versions 29.0.1547.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.2:*:*:*:*:*:*:* Versions 29.0.1547.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.3:*:*:*:*:*:*:* Versions 29.0.1547.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.4:*:*:*:*:*:*:* Versions 29.0.1547.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.5:*:*:*:*:*:*:* Versions 29.0.1547.5 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.7:*:*:*:*:*:*:* Versions 29.0.1547.7 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.8:*:*:*:*:*:*:* Versions 29.0.1547.8 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.9:*:*:*:*:*:*:* Versions 29.0.1547.9 Vulnerable ·Google
Show 42 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:29.0.1547.10:*:*:*:*:*:*:*29.0.1547.10VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.11:*:*:*:*:*:*:*29.0.1547.11VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.12:*:*:*:*:*:*:*29.0.1547.12VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.13:*:*:*:*:*:*:*29.0.1547.13VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.14:*:*:*:*:*:*:*29.0.1547.14VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.15:*:*:*:*:*:*:*29.0.1547.15VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.16:*:*:*:*:*:*:*29.0.1547.16VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.17:*:*:*:*:*:*:*29.0.1547.17VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.18:*:*:*:*:*:*:*29.0.1547.18VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.19:*:*:*:*:*:*:*29.0.1547.19VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.20:*:*:*:*:*:*:*29.0.1547.20VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.21:*:*:*:*:*:*:*29.0.1547.21VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.22:*:*:*:*:*:*:*29.0.1547.22VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.23:*:*:*:*:*:*:*29.0.1547.23VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.27:*:*:*:*:*:*:*29.0.1547.27VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.28:*:*:*:*:*:*:*29.0.1547.28VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.29:*:*:*:*:*:*:*29.0.1547.29VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.30:*:*:*:*:*:*:*29.0.1547.30VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.31:*:*:*:*:*:*:*29.0.1547.31VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.32:*:*:*:*:*:*:*29.0.1547.32VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.33:*:*:*:*:*:*:*29.0.1547.33VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.34:*:*:*:*:*:*:*29.0.1547.34VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.35:*:*:*:*:*:*:*29.0.1547.35VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.36:*:*:*:*:*:*:*29.0.1547.36VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.37:*:*:*:*:*:*:*29.0.1547.37VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.38:*:*:*:*:*:*:*29.0.1547.38VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.39:*:*:*:*:*:*:*29.0.1547.39VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.40:*:*:*:*:*:*:*29.0.1547.40VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.41:*:*:*:*:*:*:*29.0.1547.41VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.42:*:*:*:*:*:*:*29.0.1547.42VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.45:*:*:*:*:*:*:*29.0.1547.45VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.46:*:*:*:*:*:*:*29.0.1547.46VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.47:*:*:*:*:*:*:*29.0.1547.47VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.48:*:*:*:*:*:*:*29.0.1547.48VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.49:*:*:*:*:*:*:*29.0.1547.49VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.50:*:*:*:*:*:*:*29.0.1547.50VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.51:*:*:*:*:*:*:*29.0.1547.51VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.52:*:*:*:*:*:*:*29.0.1547.52VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.53:*:*:*:*:*:*:*29.0.1547.53VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.54:*:*:*:*:*:*:*29.0.1547.54VulnerableGoogle
cpe:2.3:a:google:chrome:29.0.1547.55:*:*:*:*:*:*:*29.0.1547.55VulnerableGoogle
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
  • cpe:2.3:a:google:chrome:29.0.1547.10:*:*:*:*:*:*:* Versions 29.0.1547.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.11:*:*:*:*:*:*:* Versions 29.0.1547.11 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.12:*:*:*:*:*:*:* Versions 29.0.1547.12 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.13:*:*:*:*:*:*:* Versions 29.0.1547.13 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.14:*:*:*:*:*:*:* Versions 29.0.1547.14 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.15:*:*:*:*:*:*:* Versions 29.0.1547.15 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.16:*:*:*:*:*:*:* Versions 29.0.1547.16 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.17:*:*:*:*:*:*:* Versions 29.0.1547.17 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.18:*:*:*:*:*:*:* Versions 29.0.1547.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.19:*:*:*:*:*:*:* Versions 29.0.1547.19 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.20:*:*:*:*:*:*:* Versions 29.0.1547.20 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.21:*:*:*:*:*:*:* Versions 29.0.1547.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.22:*:*:*:*:*:*:* Versions 29.0.1547.22 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.23:*:*:*:*:*:*:* Versions 29.0.1547.23 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.27:*:*:*:*:*:*:* Versions 29.0.1547.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.28:*:*:*:*:*:*:* Versions 29.0.1547.28 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.29:*:*:*:*:*:*:* Versions 29.0.1547.29 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.30:*:*:*:*:*:*:* Versions 29.0.1547.30 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.31:*:*:*:*:*:*:* Versions 29.0.1547.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.32:*:*:*:*:*:*:* Versions 29.0.1547.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.33:*:*:*:*:*:*:* Versions 29.0.1547.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.34:*:*:*:*:*:*:* Versions 29.0.1547.34 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.35:*:*:*:*:*:*:* Versions 29.0.1547.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.36:*:*:*:*:*:*:* Versions 29.0.1547.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.37:*:*:*:*:*:*:* Versions 29.0.1547.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.38:*:*:*:*:*:*:* Versions 29.0.1547.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.39:*:*:*:*:*:*:* Versions 29.0.1547.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.40:*:*:*:*:*:*:* Versions 29.0.1547.40 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.41:*:*:*:*:*:*:* Versions 29.0.1547.41 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.42:*:*:*:*:*:*:* Versions 29.0.1547.42 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.45:*:*:*:*:*:*:* Versions 29.0.1547.45 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.46:*:*:*:*:*:*:* Versions 29.0.1547.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.47:*:*:*:*:*:*:* Versions 29.0.1547.47 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.48:*:*:*:*:*:*:* Versions 29.0.1547.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.49:*:*:*:*:*:*:* Versions 29.0.1547.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.50:*:*:*:*:*:*:* Versions 29.0.1547.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.51:*:*:*:*:*:*:* Versions 29.0.1547.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.52:*:*:*:*:*:*:* Versions 29.0.1547.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.53:*:*:*:*:*:*:* Versions 29.0.1547.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.54:*:*:*:*:*:*:* Versions 29.0.1547.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:29.0.1547.55:*:*:*:*:*:*:* Versions 29.0.1547.55 Vulnerable ·Google
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2902
  2. 2026-10-03 Alias added: GHSA-g2xj-3jcv-jw82

References

Advisory 1

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences