{"schemaVersion":3,"id":"CVE-2013-2832","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors.","dates":{"published":"2013-04-16T20:00:00.000Z","modified":"2024-09-16T20:01:39.888Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00924,"percentile":0.59716,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00924},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00924,"percentile":0.59716}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00924,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00924,"percentile":0.59716}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"google","product":"chrome_os","name":"chrome os","label":"chrome_os","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 26.0.1410.56","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.0","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.1","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.3","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.4","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.5","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.6","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.7","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.8","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.9","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.10","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.11","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.12","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.14","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.15","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.16","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.17","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.18","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.19","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.20","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.21","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.22","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.23","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.24","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.25","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.26","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.27","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.28","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.29","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.30","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.31","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.32","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.33","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.34","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.35","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.36","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.37","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.38","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.39","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.40","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.41","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.42","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.43","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.44","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.45","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.46","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.47","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.48","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.49","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.50","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.51","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.52","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.54","noFixRecorded":false,"fixedIn":null},{"text":"26.0.1410.55","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 26.0.1410.56 | 26.0.1410.0 | 26.0.1410.1 | 26.0.1410.3 | 26.0.1410.4 | 26.0.1410.5 | 26.0.1410.6 | 26.0.1410.7 | 26.0.1410.8 | 26.0.1410.9 | 26.0.1410.10 | 26.0.1410.11 | 26.0.1410.12 | 26.0.1410.14 | 26.0.1410.15 | 26.0.1410.16 | 26.0.1410.17 | 26.0.1410.18 | 26.0.1410.19 | 26.0.1410.20 | 26.0.1410.21 | 26.0.1410.22 | 26.0.1410.23 | 26.0.1410.24 | 26.0.1410.25 | 26.0.1410.26 | 26.0.1410.27 | 26.0.1410.28 | 26.0.1410.29 | 26.0.1410.30 | 26.0.1410.31 | 26.0.1410.32 | 26.0.1410.33 | 26.0.1410.34 | 26.0.1410.35 | 26.0.1410.36 | 26.0.1410.37 | 26.0.1410.38 | 26.0.1410.39 | 26.0.1410.40 | 26.0.1410.41 | 26.0.1410.42 | 26.0.1410.43 | 26.0.1410.44 | 26.0.1410.45 | 26.0.1410.46 | 26.0.1410.47 | 26.0.1410.48 | 26.0.1410.49 | 26.0.1410.50 | 26.0.1410.51 | 26.0.1410.52 | 26.0.1410.54 | 26.0.1410.55","eol":null,"hubHref":"/vendor/google/chrome_os"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html","label":"googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html","hostname":"googlechromereleases.blogspot.com","tags":["X Refsource CONFIRM"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=227197","label":"code.google.com/p/chromium/issues/detail?id=227197","hostname":"code.google.com","tags":["X Refsource CONFIRM"]},{"url":"http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=commit%3Bh=9181705680e1f53fd1e895ebe84c1b7f18c5c380","label":"git.chromium.org/gitweb","hostname":"git.chromium.org","tags":["X Refsource CONFIRM"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2013-04-16T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T20:01:39.888Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T00:49:56.280Z","stale":false,"partial":false}}