CVE-2023-32636

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.

• CWE-400
• CWE-502

• https://gitlab.gnome.org/GNOME/glib/-/issues/2841Issue Tracking, Vendor Advisory
• https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835Broken Link
• https://security.netapp.com/advisory/ntap-20231110-0002/Third Party Advisory
• https://gitlab.gnome.org/GNOME/glib/-/issues/2841Issue Tracking, Vendor Advisory
• https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835Broken Link
• https://security.netapp.com/advisory/ntap-20231110-0002/Third Party Advisory

Published

Sep 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32629Local privilege escalation vulnerability in Ubuntu Kernels o…7.8
• CVE-2023-3263The Dataprobe iBoot PDU running firmware version 1.43.033120…7.5
• CVE-2023-32632A command execution vulnerability exists in the validate.so …9.8
• CVE-2023-32633Improper input validation in the Intel(R) CSME installer sof…6.7
• CVE-2023-32634An authentication bypass vulnerability exists in the CiRpcSe…7.4
• CVE-2023-32635XBRL data create application version 7.0 and earlier imprope…5.5
• CVE-2023-32637GBrowse accepts files with any formats uploaded and places t…9.8
• CVE-2023-32638Incorrect default permissions in some Intel Arc RGB Controll…7.8
• CVE-2023-32639Applicant Programme Ver.7.06 and earlier improperly restrict…5.5
• CVE-2023-3264The Dataprobe iBoot PDU running firmware version 1.43.033120…9.8
• CVE-2023-32641Improper input validation in firmware for Intel(R) QAT befor…8.8
• CVE-2023-32642Insufficient adherence to expected conventions for some Inte…6.5