An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

🗓️ 25 Feb 2021 08:00:00Reported by MicrosoftType

Overflow in g_bytes_new on 64-bit platforms risks memory corruption in GNOME GLib before 2.66.6 and 2.67.3.

Reporter	Title	Published	Views	Family All 203
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2021-27219)	28 Jul 202112:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [CVE-2021-27218, CVE-2021-27219]	27 Sep 202408:35	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.	15 Dec 202106:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.	25 Oct 202120:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in glib2 (CVE-2021-27218 and CVE-2021-27219) affects Power HMC	22 Nov 202105:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
ATTACKERKB	CVE-2021-27219	15 Feb 202117:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2021-1655)	23 Jun 202100:00	–	nessus