CVE-2026-35380

The CVE-2026-35380 relates to the cut utility in uutils coreutils, where a logic error causes the literal two-byte string '' to be interpreted as an empty delimiter. The implementation maps this string to the NUL character for both -d and --output-delimiter, potentially causing silent data corrup...

CVE-2026-35380 uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' two single quotes as an empty delimiter. The implementation mistakenly maps this string to the NUL character for both the -d delimiter and --output-delimiter options. Th...