{"id":"EUVD-2026-24975","enisaUuid":"3ff2d6f3-61e0-3b44-8aec-42973f0c58ee","description":"The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories caused by full disks or read-only file systems. This can lead to silent data corruption in backup or migration scripts, as the utility may report a successful operation even when the destination file contains old or garbage data.","datePublished":"Apr 22, 2026, 4:07:46 PM","dateUpdated":"Apr 22, 2026, 6:04:46 PM","baseScore":3.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/uutils/coreutils/issues/9745\n","aliases":"CVE-2026-35344\n","assigner":"canonical","epss":0.12,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"b2cdc7ce-3f06-11f1-8640-7ced8d12c988","vulnerability":{"id":"GHSA-wh8p-h9hw-x2mc","description":"uutils coreutils has an Unchecked Return Value Issue","datePublished":"Apr 22, 2026, 6:31:45 PM","dateUpdated":"Apr 29, 2026, 11:00:44 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-35344\nhttps://github.com/uutils/coreutils/issues/9745\nhttps://github.com/uutils/coreutils\n","enisa_id":"EUVD-2026-24975\n","aliases":"GHSA-wh8p-h9hw-x2mc\nCVE-2026-35344\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"be48b04f-355c-3151-af41-b4f2ed02c08e","vulnerability":{"id":"CVE-2026-35344","description":"The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directories caused by full disks or read-only file systems. This can lead to silent data corruption in backup or migration scripts, as the utility may report a successful operation even when the destination file contains old or garbage data.","datePublished":"Apr 22, 2026, 4:07:46 PM","dateUpdated":"Apr 22, 2026, 6:04:46 PM","status":"PUBLISHED","baseScore":3.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/uutils/coreutils/issues/9745\n","enisa_id":"EUVD-2026-24975\n","assigner":"canonical","epss":0.12,"dataProcessed":"Nov 5, 2026, 7:19:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}