7.5

CVE-2021-27219: broadcom brocade_fabric_operating_system_firmware

CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2021-27219RHSA-2021:2147RHSA-2021:2170
Published 15-02-2021Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2021-27219 is a high (CVSS 7.5) vulnerability in broadcom brocade_fabric_operating_system_firmware. EPSS estimates a 3.06% chance of exploitation in the next 30 days, higher than 87.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
41/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (NVD)
EPSS score
3.06%
0%100%
Low · +0.07 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 10 · Related 5
DLA-3044-1MGASA-2021-0318OPENSUSE-SU-2021:0406-1RHSA-2021:2519RHSA-2021:2522RHSA-2021:4526

Timeline

  1. 15-02-2021
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

3.06%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

+0.07 pp

From 2.99% on 18-09-2026

18-09-202618-10-2026
EPSS score
3.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (gitlab.gnome.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat11 products
  • glib2< 0:2.56.1-9.el7_9 | < 0:2.56.4-10.el8_4 | < 0:2.56.4-8.el8_2.1 | < 0:2.56.4-8.el8_1 | < 0:2.46.2-5.el7_3 | < 0:2.50.3-4.el7_4 | < 0:2.56.1-6.el7_7 | < 0:2.42.2-6.el7_2 | < 0:2.56.1-5.el7_6 | < 0:2.28.8-11.el6_10
  • glib2-debuginfo< 0:2.56.1-9.el7_9 | < 0:2.56.4-10.el8_4 | < 0:2.56.4-8.el8_2.1 | < 0:2.56.4-8.el8_1 | < 0:2.46.2-5.el7_3 | < 0:2.50.3-4.el7_4 | < 0:2.56.1-6.el7_7 | < 0:2.42.2-6.el7_2 | < 0:2.56.1-5.el7_6 | < 0:2.28.8-11.el6_10
  • glib2-debugsource< 0:2.56.4-10.el8_4 | < 0:2.56.4-8.el8_2.1 | < 0:2.56.4-8.el8_1
  • glib2-devel< 0:2.56.1-9.el7_9 | < 0:2.56.4-10.el8_4 | < 0:2.56.4-8.el8_2.1 | < 0:2.56.4-8.el8_1 | < 0:2.46.2-5.el7_3 | < 0:2.50.3-4.el7_4 | < 0:2.56.1-6.el7_7 | < 0:2.42.2-6.el7_2 | < 0:2.56.1-5.el7_6 | < 0:2.28.8-11.el6_10
  • glib2-devel-debuginfo< 0:2.56.4-10.el8_4 | < 0:2.56.4-8.el8_2.1 | < 0:2.56.4-8.el8_1
Netapp3 products
Debian2 products
Alpine1 product
  • glib≥ 2.67.0, < 2.66.6-r0
Broadcom1 product
Fedoraproject1 product
Gnome1 product
  • glib< 2.66.6 | ≥ 2.67.0, < 2.67.3
Ubuntu1 product
  • glib2.0All versions (No fix recorded) | < 2.48.2-0ubuntu4.7 | < 2.56.4-0ubuntu0.18.04.7 | < 2.64.6-1~ubuntu20.04.2

8 vendors · 21 products

References

38 links
Show all 38 references