CVE-2021-27218: Broadcom Brocade Fabric Operating System Firmware

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.

Affected products

• Broadcom Brocade Fabric Operating System Firmware: affected versions not specified
• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Gnome Glib: before 2.66.7 (fixed in 2.66.7); from 2.67.0, before 2.67.4 (fixed in 2.67.4)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp E-Series Performance Analyzer: affected versions not specified

Published 2021-02-15. Last modified 2026-06-17.