Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-35346
Analyzed
More InfoOfficial Page
Source-security@ubuntu.com
View Known Exploited Vulnerability (KEV) details
Published At-22 Apr, 2026 | 17:16
Updated At-27 Apr, 2026 | 12:28

The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::from_utf8_lossy(), which replaces invalid UTF-8 byte sequences with the Unicode replacement character (U+FFFD). This behavior differs from GNU comm, which processes raw bytes and preserves the original input. This results in corrupted output when the utility is used to compare binary files or files using non-UTF-8 legacy encodings.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.13.3LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Type: Secondary
Version: 3.1
Base score: 3.3
Base severity: LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CPE Matches

uutils
uutils
>>coreutils>>Versions before 0.6.0(exclusive)
cpe:2.3:a:uutils:coreutils:*:*:*:*:*:rust:*:*
Weaknesses
CWE IDTypeSource
CWE-176Secondarysecurity@ubuntu.com
CWE ID: CWE-176
Type: Secondary
Source: security@ubuntu.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/uutils/coreutils/issues/10192security@ubuntu.com
Exploit
Issue Tracking
Vendor Advisory
https://github.com/uutils/coreutils/pull/10206security@ubuntu.com
Issue Tracking
Patch
https://github.com/uutils/coreutils/releases/tag/0.6.0security@ubuntu.com
Release Notes
https://github.com/uutils/coreutils/issues/10192134c704f-9b21-4f2e-91b3-4a467353bcc0
Exploit
Issue Tracking
Vendor Advisory
Hyperlink: https://github.com/uutils/coreutils/issues/10192
Source: security@ubuntu.com
Resource:
Exploit
Issue Tracking
Vendor Advisory
Hyperlink: https://github.com/uutils/coreutils/pull/10206
Source: security@ubuntu.com
Resource:
Issue Tracking
Patch
Hyperlink: https://github.com/uutils/coreutils/releases/tag/0.6.0
Source: security@ubuntu.com
Resource:
Release Notes
Hyperlink: https://github.com/uutils/coreutils/issues/10192
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Resource:
Exploit
Issue Tracking
Vendor Advisory
Change History
0Changes found

Details not found