Medium severity5.3NVD Advisory· Published Sep 14, 2023· Updated Jun 17, 2026
CVE-2023-32643
CVE-2023-32643
Description
A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*range: <2.75.1
- (no CPE)
- osv-coords4 versionspkg:rpm/suse/glib2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/glib2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/glib2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/glib2&distro=SUSE%20Enterprise%20Storage%206
< 2.54.3-150000.4.29.1+ 3 more
- (no CPE)range: < 2.54.3-150000.4.29.1
- (no CPE)range: < 2.54.3-150000.4.29.1
- (no CPE)range: < 2.54.3-150000.4.29.1
- (no CPE)range: < 2.54.3-150000.4.29.1
Patches
Vulnerability mechanics
References
3- gitlab.gnome.org/GNOME/glib/-/issues/2840nvdIssue TrackingVendor Advisory
- https//discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835nvdBroken Link
- security.netapp.com/advisory/ntap-20240426-0005/nvd
News mentions
0No linked articles in our index yet.