Logic Error in Uutils Coreutils Cut Utility Affects Data Processing

CVE-2026-35380

What is CVE-2026-35380?

A logic error in the cut utility of Uutils Coreutils may cause the program to misinterpret a two-byte string as an empty delimiter. This issue leads to incorrect data processing, where NUL characters are used in place of intended literal characters. Automated scripts and data pipelines that handle strings could experience silent data corruption or unexpected behavior as the utility erroneously manipulates data.

References