CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

References

Affected packages

Git / gitlab.gnome.org/GNOME/glib

Affected ranges

Type

GIT

Repo

https://gitlab.gnome.org/GNOME/glib

Events

Introduced

Fixed

d5ec4f360fb5a2ef0df1862999f970dc67fa352c

Introduced

8f0b968cd128915853d17bf7944f7e0ebd90a399

Fixed

5bc9710fa644115b39bcc6fbed3b44397fd5bfa5

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.66.6"
        },
        {
            "introduced": "2.67.0"
        },
        {
            "fixed": "2.67.3"
        }
    ]
}

Affected versions

2.*

2.67.0

2.67.1

2.67.2

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "33"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-27219.json"