A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

🗓️ 25 Feb 2025 08:00:00Reported by MicrosoftType

GLib GVariant deserialization flaw causes heap overflow from backported fix; released versions unaffected.

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods Managed File Transfer	25 Apr 202510:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs may affect Operating System packages shipped with IBM CICS TX Advanced 10.1	4 Sep 202311:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	2 Sep 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Hyper Converged Database	21 Jan 202610:51	–	ibm
ATTACKERKB	CVE-2023-32665	14 Sep 202320:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2023-225)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2025-2767)	26 Feb 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0064: glib2 (ALINUX3-SA-2024:0064)	14 May 202500:00	–	nessus
Tenable Nessus	Debian dla-3583 : libglib2.0-0 - security update	26 Sep 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : glib2 (EulerOS-SA-2023-2582)	8 Aug 202300:00	–	nessus