The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.
2013-12-07T00:55:04.037
2025-04-11T00:51:21.963
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | chrome | ≤ 31.0.1650.62 | Yes | |
| Application | chrome | 31.0.1650.0 | Yes | |
| Application | chrome | 31.0.1650.2 | Yes | |
| Application | chrome | 31.0.1650.3 | Yes | |
| Application | chrome | 31.0.1650.4 | Yes | |
| Application | chrome | 31.0.1650.5 | Yes | |
| Application | chrome | 31.0.1650.6 | Yes | |
| Application | chrome | 31.0.1650.7 | Yes | |
| Application | chrome | 31.0.1650.8 | Yes | |
| Application | chrome | 31.0.1650.9 | Yes | |
| Application | chrome | 31.0.1650.10 | Yes | |
| Application | chrome | 31.0.1650.11 | Yes | |
| Application | chrome | 31.0.1650.12 | Yes | |
| Application | chrome | 31.0.1650.13 | Yes | |
| Application | chrome | 31.0.1650.14 | Yes | |
| Application | chrome | 31.0.1650.15 | Yes | |
| Application | chrome | 31.0.1650.16 | Yes | |
| Application | chrome | 31.0.1650.17 | Yes | |
| Application | chrome | 31.0.1650.18 | Yes | |
| Application | chrome | 31.0.1650.19 | Yes | |
| Application | chrome | 31.0.1650.20 | Yes | |
| Application | chrome | 31.0.1650.22 | Yes | |
| Application | chrome | 31.0.1650.23 | Yes | |
| Application | chrome | 31.0.1650.25 | Yes | |
| Application | chrome | 31.0.1650.26 | Yes | |
| Application | chrome | 31.0.1650.27 | Yes | |
| Application | chrome | 31.0.1650.28 | Yes | |
| Application | chrome | 31.0.1650.29 | Yes | |
| Application | chrome | 31.0.1650.30 | Yes | |
| Application | chrome | 31.0.1650.31 | Yes | |
| Application | chrome | 31.0.1650.32 | Yes | |
| Application | chrome | 31.0.1650.33 | Yes | |
| Application | chrome | 31.0.1650.34 | Yes | |
| Application | chrome | 31.0.1650.35 | Yes | |
| Application | chrome | 31.0.1650.36 | Yes | |
| Application | chrome | 31.0.1650.37 | Yes | |
| Application | chrome | 31.0.1650.38 | Yes | |
| Application | chrome | 31.0.1650.39 | Yes | |
| Application | chrome | 31.0.1650.41 | Yes | |
| Application | chrome | 31.0.1650.42 | Yes | |
| Application | chrome | 31.0.1650.43 | Yes | |
| Application | chrome | 31.0.1650.44 | Yes | |
| Application | chrome | 31.0.1650.45 | Yes | |
| Application | chrome | 31.0.1650.46 | Yes | |
| Application | chrome | 31.0.1650.47 | Yes | |
| Application | chrome | 31.0.1650.48 | Yes | |
| Application | chrome | 31.0.1650.49 | Yes | |
| Application | chrome | 31.0.1650.50 | Yes | |
| Application | chrome | 31.0.1650.51 | Yes | |
| Application | chrome | 31.0.1650.52 | Yes | |
| Application | chrome | 31.0.1650.53 | Yes | |
| Application | chrome | 31.0.1650.54 | Yes | |
| Application | chrome | 31.0.1650.55 | Yes | |
| Application | chrome | 31.0.1650.57 | Yes | |
| Application | chrome | 31.0.1650.58 | Yes | |
| Application | chrome | 31.0.1650.59 | Yes | |
| Application | chrome | 31.0.1650.60 | Yes | |
| Application | chrome | 31.0.1650.61 | Yes | |
| Application | v8 | ≤ 3.22.24 | Yes | |
| Application | v8 | 3.22.0 | Yes | |
| Application | v8 | 3.22.1 | Yes | |
| Application | v8 | 3.22.2 | Yes | |
| Application | v8 | 3.22.3 | Yes | |
| Application | v8 | 3.22.4 | Yes | |
| Application | v8 | 3.22.5 | Yes | |
| Application | v8 | 3.22.6 | Yes | |
| Application | v8 | 3.22.7 | Yes | |
| Application | v8 | 3.22.8 | Yes | |
| Application | v8 | 3.22.9 | Yes | |
| Application | v8 | 3.22.10 | Yes | |
| Application | v8 | 3.22.11 | Yes | |
| Application | v8 | 3.22.12 | Yes | |
| Application | v8 | 3.22.13 | Yes | |
| Application | v8 | 3.22.14 | Yes | |
| Application | v8 | 3.22.15 | Yes | |
| Application | v8 | 3.22.16 | Yes | |
| Application | v8 | 3.22.17 | Yes | |
| Application | v8 | 3.22.18 | Yes | |
| Application | v8 | 3.22.19 | Yes | |
| Application | v8 | 3.22.20 | Yes | |
| Application | v8 | 3.22.21 | Yes | |
| Application | v8 | 3.22.22 | Yes | |
| Application | v8 | 3.22.23 | Yes |