CVE-2021-27219
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.
Published Feb 15, 2021 · updated Oct 14, 2026 · gnome glib
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 15, 2021 · NIST NVD
Detected
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Affected
- cpe broadcom/brocade fabric operating system firmwareversion unspecified
- cpe fedoraproject/fedora33
- cpe fedoraproject/fedora34
- cpe gnome/glibversion unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/cloud backupversion unspecified
- cpe netapp/e-series performance analyzerversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2021-27219
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-27219
30-day exploitation probability 3.1%
first.org - NIST NVDVulnerability recordCVE-2021-27219
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
nvd.nist.gov