Back to Database
Status published
High
CVE-2013-6649
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink,...
Vulnerability Description
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6649
Credits & Attribution
No credits recorded in the NVD database.
References
More from google
View All →CVE-2025-24959
Environment Variable Injection for dotenv API in zx
Low
1
CVE-2024-45601
Local file Inclusion via static file serving functionality in Mesop
High
7.5
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
Critical
9.6
CVE-2022-31055
Improper Access Control in kctf
High
7.5
CVE-2022-23569
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Medium
6.5
Affected Vendor
Affected Software
chrome, debian linux, opensuse
Vulnerable Versions:
0, 32.0.1700.0, 32.0.1700.2, 32.0.1700.3, 32.0.1700.4, 32.0.1700.5, 32.0.1700.6, 32.0.1700.7, 32.0.1700.8, 32.0.1700.9, 32.0.1700.10, 32.0.1700.11, 32.0.1700.12, 32.0.1700.13, 32.0.1700.14, 32.0.1700.15, 32.0.1700.16, 32.0.1700.17, 32.0.1700.18, 32.0.1700.19, 32.0.1700.21, 32.0.1700.22, 32.0.1700.23, 32.0.1700.24, 32.0.1700.26, 32.0.1700.27, 32.0.1700.28, 32.0.1700.29, 32.0.1700.30, 32.0.1700.31, 32.0.1700.32, 32.0.1700.33, 32.0.1700.34, 32.0.1700.35, 32.0.1700.38, 32.0.1700.39, 32.0.1700.41, 32.0.1700.50, 32.0.1700.51, 32.0.1700.52, 32.0.1700.53, 32.0.1700.54, 32.0.1700.55, 32.0.1700.56, 32.0.1700.57, 32.0.1700.58, 32.0.1700.59, 32.0.1700.62, 32.0.1700.63, 32.0.1700.64, 32.0.1700.65, 32.0.1700.66, 32.0.1700.67, 32.0.1700.68, 32.0.1700.69, 32.0.1700.70, 32.0.1700.71, 32.0.1700.72, 32.0.1700.74, 32.0.1700.75, 32.0.1700.76, 32.0.1700.77, 32.0.1700.94, 32.0.1700.95, 32.0.1700.96, 32.0.1700.97, 32.0.1700.98, 32.0.1700.99, 32.0.1700.100, 7.0, 8.0, 12.3, 13.1
Timeline
Official Publish:
January 28th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.