Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-35380
Analyzed
More InfoOfficial Page
Source-security@ubuntu.com
View Known Exploited Vulnerability (KEV) details
Published At-22 Apr, 2026 | 17:16
Updated At-29 Apr, 2026 | 15:57

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter. The implementation mistakenly maps this string to the NUL character for both the -d (delimiter) and --output-delimiter options. This vulnerability can lead to silent data corruption or logic errors in automated scripts and data pipelines that process strings containing these characters, as the utility may unintentionally split or join data on NUL bytes rather than the intended literal characters.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Type: Secondary
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CPE Matches

uutils
uutils
>>coreutils>>Versions before 0.8.0(exclusive)
cpe:2.3:a:uutils:coreutils:*:*:*:*:*:rust:*:*
Weaknesses
CWE IDTypeSource
CWE-20Secondarysecurity@ubuntu.com
NVD-CWE-noinfoPrimarynvd@nist.gov
CWE ID: CWE-20
Type: Secondary
Source: security@ubuntu.com
CWE ID: NVD-CWE-noinfo
Type: Primary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/uutils/coreutils/pull/11399security@ubuntu.com
Exploit
Issue Tracking
Patch
https://github.com/uutils/coreutils/releases/tag/0.8.0security@ubuntu.com
Release Notes
Hyperlink: https://github.com/uutils/coreutils/pull/11399
Source: security@ubuntu.com
Resource:
Exploit
Issue Tracking
Patch
Hyperlink: https://github.com/uutils/coreutils/releases/tag/0.8.0
Source: security@ubuntu.com
Resource:
Release Notes
Change History
0Changes found

Details not found