CVE-2021-36087: fedoraproject fedora Out-of-bounds Read

Vulnerability summary

CVE-2021-36087 is a low (CVSS 3.3) Out-of-bounds Read vulnerability in fedoraproject fedora. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 01-07-2021
   PublishedVulnerability first disclosed.
2. 14-10-2026
   Last modifiedVulnerability information updated.

Description

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.