How severe is CVE-2021-36087?

CVE-2021-36087 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2021-36087 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2021-36087?

CVE-2021-36087 primarily affects Selinux Project Selinux. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2021-36087?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2021-36087 published?

CVE-2021-36087 was published on 2021-07-01 and last updated on 2026-06-17.

CVE-2021-36087

CVE-2021-36087 is a low-severity vulnerability in Selinux Project Selinux with a CVSS 3.x base score of 3.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-125.

Key facts

Severity: Low (CVSS 3.x base score 3.3)
CVSS v2: 2.1
EPSS exploit prediction: 0% (36th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-125
Affected product: Selinux Project Selinux
Published: 2021-07-01
Last modified: 2026-06-17

Description

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

Frequently asked questions

What is CVE-2021-36087?: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
How severe is CVE-2021-36087?: CVE-2021-36087 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2021-36087 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-36087?: CVE-2021-36087 primarily affects Selinux Project Selinux. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2021-36087?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2021-36087 published?: CVE-2021-36087 was published on 2021-07-01 and last updated on 2026-06-17.

References

Affected products (2)

cpe:2.3:o:selinux_project:selinux:3.2:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

More vulnerabilities in Selinux Project Selinux

CVE-2016-7545 — High (CVSS 8.8): SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI…
CVE-2015-3170 — Medium (CVSS 5.5): selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH…
CVE-2018-1063 — Medium (CVSS 4.4): Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious…
CVE-2021-36086 — Low (CVSS 3.3): The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set…
CVE-2021-36085 — Low (CVSS 3.3): The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from…
CVE-2021-36084 — Low (CVSS 3.3): The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from…

All CVEs affecting Selinux Project Selinux →

Other CWE-125 (Out-of-bounds Read) vulnerabilities

CVE-2026-24826 — Critical (CVSS 10.0): Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read,…
CVE-2024-22004 — Critical (CVSS 10.0): Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a…
CVE-2021-41556 — Critical (CVSS 10.0): sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that…
CVE-2021-21777 — Critical (CVSS 10.0): An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer…
CVE-2017-14451 — Critical (CVSS 10.0): An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A…
CVE-2013-0767 — Critical (CVSS 10.0): The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and…

Browse all CWE-125 (Out-of-bounds Read) vulnerabilities →