CVE-2023-32643

State: Published
Severity: 5.3 Medium
Published: Sep 14, 2023
Updated: Oct 14, 2026
Reserved: May 30, 2023

Description

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L	redhat

Weaknesses

CWE-122

Affected Products

Product	Versions
glibglib	2.75.1Not affected

References

https://gitlab.gnome.org/GNOME/glib/-/issues/2840
https://https//discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835
https://security.netapp.com/advisory/ntap-20240426-0005/
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.