CVE-2013-2912

CVE-2013-2912 is a use-after-free vulnerability in the Pepper Plug-in API (PPAPI) within Google Chrome versions prior to 30.0.1599.66. This flaw, specifically in the PepperInProcessRouter::SendToHost function, allows remote attackers to trigger a denial of service and potentially achieve other unspecified impacts through specially crafted resource-destruction messages. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received minimal community discussion and media coverage.