Skip to main content

CWE-768

Incorrect Short Circuit Evaluation

1 CVEs Avg CVSS 3.3 MITRE
0
CRITICAL
0
HIGH
0
MEDIUM
1
LOW
0
POC
0
KEV

Monthly

CVE-2026-35378 Cargo LOW PATCH Monitor

Logic error in uutils coreutils expr utility evaluates parenthesized subexpressions during parsing rather than execution, breaking short-circuit evaluation for logical OR and AND operations. This causes arithmetic errors in dead code branches (e.g., division by zero) to trigger fatal errors instead of being safely ignored, breaking shell script control flow and diverging from GNU expr compatibility. Affects uutils coreutils versions prior to 0.8.0; publicly available exploit code exists per SSVC data.

Information Disclosure
NVD GitHub VulDB
CVSS 3.1
3.3
EPSS
0.0%
EPSS 0% CVSS 3.3
LOW PATCH Monitor

Logic error in uutils coreutils expr utility evaluates parenthesized subexpressions during parsing rather than execution, breaking short-circuit evaluation for logical OR and AND operations. This causes arithmetic errors in dead code branches (e.g., division by zero) to trigger fatal errors instead of being safely ignored, breaking shell script control flow and diverging from GNU expr compatibility. Affects uutils coreutils versions prior to 0.8.0; publicly available exploit code exists per SSVC data.

Information Disclosure
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy