CWE-768 Incorrect Short Circuit Evaluation

variant

The product contains a conditional statement with multiple logical expressions in which one of the non-leading expressions may produce side effects. This may lead to an unexpected state in the program after the execution of the conditional, because short-circuiting logic may prevent the side effects from occurring.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-35378US——
A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan