Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-36057 State: PUBLISHED Published: 2021-09-01T14:33:01.914Z Last Updated: 2025-11-03T19:26:07.617Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-123 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.h
onal Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36058 State: PUBLISHED Published: 2021-09-01T14:33:58.983Z Last Updated: 2025-11-03T19:26:08.988Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-190 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lt
CVE ID: CVE-2021-36059 State: PUBLISHED Published: 2021-09-01T14:33:20.656Z Last Updated: 2025-04-23T19:31:13.774Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36060 State: PUBLISHED Published: 2023-09-06T13:08:08.104Z Last Updated: 2025-02-27T21:00:57.023Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Media Encoder Problem Types: CWE-125 Description: Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adob
cious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/media-encoder/apsb21-43.html
CVE ID: CVE-2021-36061 State: PUBLISHED Published: 2021-09-01T14:33:53.219250Z Last Updated: 2024-09-16T19:51:54.379Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Adobe Products: Connect Problem Types: CWE-657 Description: Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user interaction in that a victim must publish a link of a Connect recording. Additional Analyst Notes: - CVE Program Container: References: - https
ictim must publish a link of a Connect recording. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE ID: CVE-2021-36062 State: PUBLISHED Published: 2021-09-01T14:33:33.620101Z Last Updated: 2024-09-17T00:46:06.229Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Adobe Products: Connect Problem Types: CWE-79 Description: Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: References: -
be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE ID: CVE-2021-36063 State: PUBLISHED Published: 2021-09-01T14:34:16.000330Z Last Updated: 2024-09-17T02:37:42.482Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Adobe Products: Connect Problem Types: CWE-79 Description: Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/connect/apsb21-
ditional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/connect/apsb21-66.html
CVE ID: CVE-2021-36064 State: PUBLISHED Published: 2021-09-01T14:33:45.316Z Last Updated: 2025-11-03T19:26:10.359Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-124 Description: XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-ann
CVE ID: CVE-2021-36065 State: PUBLISHED Published: 2021-09-01T14:34:43.802481Z Last Updated: 2024-09-17T00:16:44.915Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-122 Description: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop/apsb21-68.ht
l Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop/apsb21-68.html
CVE ID: CVE-2021-36066 State: PUBLISHED Published: 2021-09-01T14:34:10.431611Z Last Updated: 2024-09-17T02:01:46.394Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-787 Description: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop/apsb21-68.html
CVE ID: CVE-2021-36067 State: PUBLISHED Published: 2021-09-01T14:34:48.929Z Last Updated: 2025-04-23T19:30:42.139Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36068 State: PUBLISHED Published: 2021-09-01T14:34:04.704Z Last Updated: 2025-04-23T19:31:07.553Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36069 State: PUBLISHED Published: 2021-09-01T14:34:55.467Z Last Updated: 2025-04-23T19:30:35.823Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36070 State: PUBLISHED Published: 2021-09-01T14:34:22.638Z Last Updated: 2025-04-23T19:30:59.760Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Media Encoder Problem Types: CWE-788 Description: Adobe Media Encoder version 15.1 (and earlier) is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.ado
icious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/media-encoder/apsb21-70.html
CVE ID: CVE-2021-36071 State: PUBLISHED Published: 2021-09-01T14:35:15.871213Z Last Updated: 2024-09-16T18:39:31.768Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb21
Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36072 State: PUBLISHED Published: 2021-09-01T14:34:38.292Z Last Updated: 2025-04-23T19:30:48.382Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36073 State: PUBLISHED Published: 2021-09-01T14:35:47.513Z Last Updated: 2025-04-23T19:30:06.105Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-122 Description: Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/secu
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36074 State: PUBLISHED Published: 2021-09-01T14:35:01.165Z Last Updated: 2025-04-23T19:30:30.262Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36075 State: PUBLISHED Published: 2021-09-01T14:35:58.076Z Last Updated: 2025-04-23T19:29:58.111Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-120 Description: Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36076 State: PUBLISHED Published: 2021-09-01T14:35:10.650Z Last Updated: 2025-04-23T19:30:24.167Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36077 State: PUBLISHED Published: 2021-09-01T14:35:53.307425Z Last Updated: 2024-09-17T03:18:28.743Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36078 State: PUBLISHED Published: 2021-09-01T14:35:27.466Z Last Updated: 2025-04-23T19:30:11.861Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36079 State: PUBLISHED Published: 2021-09-01T14:36:05.440Z Last Updated: 2025-04-23T19:29:51.279Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container
requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36080 State: PUBLISHED Published: 2021-07-01T02:47:32 Last Updated: 2024-08-04T00:47:43.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-495.yaml - https://github.com/LibreDWG/libredwg/commit/9b6e0ff9ef02818df034fc42c3bd149a5ff89342
CVE ID: CVE-2021-36081 State: PUBLISHED Published: 2021-07-01T02:47:50 Last Updated: 2024-08-04T00:47:43.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tesseract-ocr/OSV-2021-211.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 - https://github.com/tesseract-ocr/tesseract/commit/e6f15621c2ab2ecbfabf656942d8ef66f03b2d55
CVE ID: CVE-2021-36082 State: PUBLISHED Published: 2021-07-01T02:48:02 Last Updated: 2024-08-04T00:47:43.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/1ec621c85b9411cc611652fd57a892cfef478af3 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30393 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2021-304.yaml
CVE ID: CVE-2021-36083 State: PUBLISHED Published: 2021-07-01T02:48:44 Last Updated: 2024-08-04T00:47:43.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. Additional Analyst Notes: - CVE Program Container: References: - https://invent.kde.org/frameworks/kimageformats/commit/297ed9a2fe339bfe36916b9fce628c3242e5be0f - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33742 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/kimageformats/OSV-2021-695.yaml
CVE ID: CVE-2021-36084 State: PUBLISHED Published: 2021-07-01T02:49:01.000Z Last Updated: 2025-11-03T21:44:53.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-417.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065 - https://github.com/SELinuxProject/selinux/commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists
commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
CVE ID: CVE-2021-36085 State: PUBLISHED Published: 2021-07-01T02:49:22.000Z Last Updated: 2025-11-03T21:44:54.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-421.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124 - https://github.com/SELinuxProject/selinux/commit/2d35fcc7e9e976a2346b1de20e54f8663e8a6cba - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
cc7e9e976a2346b1de20e54f8663e8a6cba - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
CVE ID: CVE-2021-36086 State: PUBLISHED Published: 2021-07-01T02:49:37.000Z Last Updated: 2025-11-03T21:44:56.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 - https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists
commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
CVE ID: CVE-2021-36087 State: PUBLISHED Published: 2021-07-01T02:49:55.000Z Last Updated: 2025-11-03T21:44:57.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-585.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675 - https://lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm
.org/p/oss-fuzz/issues/detail?id=32675 - https://lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm+yaQ%40mail.gmail.com/T/ - https://github.com/SELinuxProject/selinux/commit/340f0eb7f3673e8aacaf0a96cbfcd4d12a405521 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/