Findings

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

Published Feb 15, 2021 · updated Oct 14, 2026 · gnome glib

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 15, 2021 · NIST NVD

    Detected

    An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Affected

  • cpe broadcom/brocade fabric operating system firmwareversion unspecified
  • cpe fedoraproject/fedora33
  • cpe fedoraproject/fedora34
  • cpe gnome/glibversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/e-series performance analyzerversion unspecified

Sources

  • CVE.orgCVE-2021-27219

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-27219

    30-day exploitation probability 3.0%

    first.org
  • NIST NVDCVE-2021-27219

    An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

    nvd.nist.gov

References