CVE-2021-27219

Katalog CVE

CVSS 7.5 · High EPSS 3,0%

Kerentanan Incorrect Conversion between Numeric Types pada gnome glib, fedoraproject fedora +5 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Rincian

Terbit di NVD

15 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-681: Incorrect Conversion between Numeric Types

EPSS (30 hari)

3,0% peluang dieksploitasi; lebih tinggi dari 87,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.gnome.org/GNOME/glib/-/issues/2319 exploit · issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202107-13 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210319-0004/ advisory pihak ketiga
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.a...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHR...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVUR...