CVE-2021-27218

7.5HIGH

Key Information:

Vendor
Gnome
Status
Glib
Vendor
CVE Published:
15 February 2021

Summary

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.

References

https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942
x_refsource_MISC
https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1944
x_refsource_MISC
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.