Approved changes feed: RSS · Atom

cpe:2.3:a:google:v8:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductV8 (7910e7d0-5064-5419-bf41-49b0b96ede23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:code.google/v8 purl2cpe 2026-06-01 10:16:36.859173
pkg:github/v8/v8 purl2cpe 2026-06-01 10:16:36.859176
pkg:googlesource/v8 purl2cpe 2026-06-01 10:16:36.859180

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5380 vulnerable 2026-06-08 05:06:49.935950 Details available
The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.
Published: 2015-07-09T10:00:00.000Z
Updated: 2024-08-06T06:50:02.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2838 vulnerable 2026-06-08 05:04:28.192038 Details available
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Published: 2013-05-22T10:00:00.000Z
Updated: 2024-08-06T15:52:20.513Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.