CVE-2021-27219High· 7.5▾ TwilightAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to me…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.0%
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
glib < 2.66.6glib >= 2.67.0, < 2.67.3fedora = 33fedora = 34active_iq_unified_managercloud_backupe-series_performance_analyzerbrocade_fabric_operating_system_firmwaredebian_linux = 9.0Upgrade past the affected range:
glib 2.67.3Connected by shared product, vendor, weakness, or advisory.
CVE-2021-27218High· 7.5An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4
CVE-2021-28153Medium· 5.3An issue was discovered in GNOME GLib before 2.66.8
CVE-2020-6096High· 8.1An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000
CVE-2026-58015Medium· 5.9A flaw was found in GLib
CVE-2026-58014High· 7.3A flaw was found in GLib
CVE-2026-58013Medium· 6.5A flaw was found in GLib