Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package glib2 (opens in a new tab)

Threat Intelligence

3.06% (88^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL6-GLIB2-1414602
published26 Jul 2021
disclosed4 Feb 2021

Report a new vulnerability Found a mistake?

Introduced: 4 Feb 2021

CVE-2021-27219 (opens in a new tab) CWE-190 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream glib2 package and not the glib2 package as distributed by RHEL.

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.