CVE-2023-29499 MEDIUM

CVE-2023-29499: Gvariant offset table entry size is not checked in is_normal()

Vendor N/A
Product glib2
Weakness CWE-400
Published September 14, 2023
Last update December 18, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.

Key dates

02Disclosure timeline

September 14, 2023 CVE published
December 18, 2025 Record updated