VULNERABILITY INTELLIGENCE

CVE-2013-2905

CVSS score5 MEDIUM
EPSS probability0.84%
CISA KEVNot currently listed
Published2013-08-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.

Primary references