Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers…
Priority LOW 36CWE-399Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the string values of id attributes.
Why it matters now
EPSS 0.01459 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 44
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | up to 31.0.1650.47 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:* | 31.0.1650.0 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:* | 31.0.1650.2 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:* | 31.0.1650.3 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:* | 31.0.1650.4 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:* | 31.0.1650.5 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:* | 31.0.1650.6 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:* | 31.0.1650.7 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:* | 31.0.1650.8 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:* | 31.0.1650.9 | Vulnerable |
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 31.0.1650.47 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:* Versions 31.0.1650.0 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:* Versions 31.0.1650.2 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:* Versions 31.0.1650.3 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:* Versions 31.0.1650.4 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:* Versions 31.0.1650.5 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:* Versions 31.0.1650.6 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:* Versions 31.0.1650.7 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:* Versions 31.0.1650.8 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:* Versions 31.0.1650.9 Vulnerable ·Google
Show 34 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:31.0.1650.10:*:*:*:*:*:*:* | 31.0.1650.10 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.11:*:*:*:*:*:*:* | 31.0.1650.11 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.12:*:*:*:*:*:*:* | 31.0.1650.12 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.13:*:*:*:*:*:*:* | 31.0.1650.13 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.14:*:*:*:*:*:*:* | 31.0.1650.14 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.15:*:*:*:*:*:*:* | 31.0.1650.15 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.16:*:*:*:*:*:*:* | 31.0.1650.16 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.17:*:*:*:*:*:*:* | 31.0.1650.17 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.18:*:*:*:*:*:*:* | 31.0.1650.18 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.19:*:*:*:*:*:*:* | 31.0.1650.19 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.20:*:*:*:*:*:*:* | 31.0.1650.20 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.22:*:*:*:*:*:*:* | 31.0.1650.22 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.23:*:*:*:*:*:*:* | 31.0.1650.23 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.25:*:*:*:*:*:*:* | 31.0.1650.25 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.26:*:*:*:*:*:*:* | 31.0.1650.26 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.27:*:*:*:*:*:*:* | 31.0.1650.27 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.28:*:*:*:*:*:*:* | 31.0.1650.28 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.29:*:*:*:*:*:*:* | 31.0.1650.29 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.30:*:*:*:*:*:*:* | 31.0.1650.30 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.31:*:*:*:*:*:*:* | 31.0.1650.31 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.32:*:*:*:*:*:*:* | 31.0.1650.32 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.33:*:*:*:*:*:*:* | 31.0.1650.33 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.34:*:*:*:*:*:*:* | 31.0.1650.34 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.35:*:*:*:*:*:*:* | 31.0.1650.35 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.36:*:*:*:*:*:*:* | 31.0.1650.36 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.37:*:*:*:*:*:*:* | 31.0.1650.37 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.38:*:*:*:*:*:*:* | 31.0.1650.38 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.39:*:*:*:*:*:*:* | 31.0.1650.39 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.41:*:*:*:*:*:*:* | 31.0.1650.41 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.42:*:*:*:*:*:*:* | 31.0.1650.42 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.43:*:*:*:*:*:*:* | 31.0.1650.43 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.44:*:*:*:*:*:*:* | 31.0.1650.44 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.45:*:*:*:*:*:*:* | 31.0.1650.45 | Vulnerable | |
| cpe:2.3:a:google:chrome:31.0.1650.46:*:*:*:*:*:*:* | 31.0.1650.46 | Vulnerable |
- cpe:2.3:a:google:chrome:31.0.1650.10:*:*:*:*:*:*:* Versions 31.0.1650.10 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.11:*:*:*:*:*:*:* Versions 31.0.1650.11 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.12:*:*:*:*:*:*:* Versions 31.0.1650.12 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.13:*:*:*:*:*:*:* Versions 31.0.1650.13 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.14:*:*:*:*:*:*:* Versions 31.0.1650.14 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.15:*:*:*:*:*:*:* Versions 31.0.1650.15 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.16:*:*:*:*:*:*:* Versions 31.0.1650.16 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.17:*:*:*:*:*:*:* Versions 31.0.1650.17 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.18:*:*:*:*:*:*:* Versions 31.0.1650.18 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.19:*:*:*:*:*:*:* Versions 31.0.1650.19 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.20:*:*:*:*:*:*:* Versions 31.0.1650.20 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.22:*:*:*:*:*:*:* Versions 31.0.1650.22 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.23:*:*:*:*:*:*:* Versions 31.0.1650.23 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.25:*:*:*:*:*:*:* Versions 31.0.1650.25 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.26:*:*:*:*:*:*:* Versions 31.0.1650.26 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.27:*:*:*:*:*:*:* Versions 31.0.1650.27 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.28:*:*:*:*:*:*:* Versions 31.0.1650.28 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.29:*:*:*:*:*:*:* Versions 31.0.1650.29 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.30:*:*:*:*:*:*:* Versions 31.0.1650.30 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.31:*:*:*:*:*:*:* Versions 31.0.1650.31 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.32:*:*:*:*:*:*:* Versions 31.0.1650.32 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.33:*:*:*:*:*:*:* Versions 31.0.1650.33 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.34:*:*:*:*:*:*:* Versions 31.0.1650.34 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.35:*:*:*:*:*:*:* Versions 31.0.1650.35 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.36:*:*:*:*:*:*:* Versions 31.0.1650.36 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.37:*:*:*:*:*:*:* Versions 31.0.1650.37 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.38:*:*:*:*:*:*:* Versions 31.0.1650.38 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.39:*:*:*:*:*:*:* Versions 31.0.1650.39 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.41:*:*:*:*:*:*:* Versions 31.0.1650.41 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.42:*:*:*:*:*:*:* Versions 31.0.1650.42 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.43:*:*:*:*:*:*:* Versions 31.0.1650.43 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.44:*:*:*:*:*:*:* Versions 31.0.1650.44 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.45:*:*:*:*:*:*:* Versions 31.0.1650.45 Vulnerable ·Google
- cpe:2.3:a:google:chrome:31.0.1650.46:*:*:*:*:*:*:* Versions 31.0.1650.46 Vulnerable ·Google
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-6624
- 2026-10-03 Alias added: GHSA-7mv3-v365-qq5c
References
More Google Chrome vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2013-6624 · CVE Program
- CVE-2013-6624 · NVD
- FIRST EPSS
- GHSA-7mv3-v365-qq5c · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences