CVE-2021-27218
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.
Published Feb 15, 2021 · updated Oct 14, 2026 · gnome glib
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 15, 2021 · NIST NVD
Detected
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Affected
- cpe broadcom/brocade fabric operating system firmwareversion unspecified
- cpe fedoraproject/fedora33
- cpe fedoraproject/fedora34
- cpe gnome/glibversion unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/cloud backupversion unspecified
- cpe netapp/e-series performance analyzerversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2021-27218
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-27218
30-day exploitation probability 4.1%
first.org - NIST NVDVulnerability recordCVE-2021-27218
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
nvd.nist.gov