CVE-2013-2917 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
1.3%
top 19.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedOct 2
Latest updateMay 17

Description

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome30.0.1599.65+58

🔴Vulnerability Details

1
GHSA
GHSA-8rc7-57xc-vxj6: The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage↗2022-05-17
▶
CVE-2013-2917 — Google Chrome vulnerability | cvebase