CVE-2023-32665
A flaw was found in GLib.
Published Sep 14, 2023 · updated Oct 15, 2026 · gnome glib
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 14, 2023 · NIST NVD
Detected
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Oct 15, 2026 · NIST NVD
Updated
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Affected
- cpe gnome/glibversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2023-32665
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-32665
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2023-32665
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
nvd.nist.gov