CVE-2021-27218
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.
Published Feb 15, 2021 · updated Oct 14, 2026 · gnome glib
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Timeline
Detection, updates, and resolution for this record.
Feb 15, 2021 · NIST NVD
Detected
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Oct 14, 2026 · NIST NVD
Updated
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Affected
- cpe broadcom/brocade fabric operating system firmwareversion unspecified
- cpe fedoraproject/fedora33
- cpe fedoraproject/fedora34
- cpe gnome/glibversion unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/cloud backupversion unspecified
- cpe netapp/e-series performance analyzerversion unspecified
Sources
- CVE.orgCVE-2021-27218
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-27218
30-day exploitation probability 4.1%
first.org - NIST NVDCVE-2021-27218
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
nvd.nist.gov