CVE-2013-6632

Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.

• CWE-189

• http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.htmlVendor Advisory
• http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2013/dsa-2799Third Party Advisory
• http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/Third Party Advisory
• https://code.google.com/p/chromium/issues/detail?id=319117Vendor Advisory
• https://code.google.com/p/chromium/issues/detail?id=319125Vendor Advisory
• http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.htmlVendor Advisory
• http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2013/dsa-2799Third Party Advisory
• http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/Third Party Advisory
• https://code.google.com/p/chromium/issues/detail?id=319117Vendor Advisory
• https://code.google.com/p/chromium/issues/detail?id=319125Vendor Advisory

Published

Nov 18, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6626The WebContentsImpl::AttachInterstitialPage function in cont…
• CVE-2013-6627net/http/http_stream_parser.cc in Google Chrome before 31.0.…
• CVE-2013-6628net/socket/ssl_client_socket_nss.cc in the TLS implementatio…
• CVE-2013-6629The get_sos function in jdmarker.c in (1) libjpeg 6b and (2)…
• CVE-2013-6630The get_dht function in jdmarker.c in libjpeg-turbo through …
• CVE-2013-6631Use-after-free vulnerability in the Channel::SendRTCPPacket …
• CVE-2013-6634The OneClickSigninHelper::ShowInfoBarIfPossible function in …
• CVE-2013-6635Use-after-free vulnerability in the editing implementation i…
• CVE-2013-6636The FrameLoader::notifyIfInitialDocumentAccessed function in…
• CVE-2013-6637Multiple unspecified vulnerabilities in Google Chrome before…
• CVE-2013-6638Multiple buffer overflows in runtime.cc in Google V8 before …
• CVE-2013-6639The DehoistArrayIndex function in hydrogen-dehoist.cc (aka h…