CVE-2013-6640: The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as u...

Security readout for executives and security teams

This is an old Google V8/Chrome browser engine flaw. A malicious web page could make an affected browser read outside expected memory while running JavaScript, causing a denial of service. The bundle names Chrome before 31.0.1650.63 and V8 before 3.22.24.7. No source here shows active exploitation. Exposure is mainly legacy Chrome, Chromium, embedded V8, or distribution packages that still contain V8 before 3.22.24.7 or Chrome before 31.0.1650.63. Modern managed browsers are unlikely to be affected, but old kiosk, appliance, or embedded browser deployments should be checked. Prioritize this as legacy exposure cleanup, not an emergency response, unless the organization still operates affected browser or embedded V8 versions. The business risk is service disruption from malicious web content on obsolete client software. Mitigation focus: Update Chrome or Chromium-derived packages using vendor guidance.; Ensure V8 is newer than 3.22.24.7 where separately embedded.; Retire unsupported browsers and embedded runtimes using old V8 builds..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.