Skip to content
OpenAdvisories

Weakness (CWE)

CWE-783: Operator Precedence Logic Error

Base Draft

The product uses an expression in which operator precedence causes incorrect logic to be used.

How to prevent it (1 mitigation)

  1. Implementation

    Regularly wrap sub-expressions in parentheses, especially in security-critical code.

Source: MITRE CWE-783

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.8
    CVE-2026-7270 Public exploit

    Local privilege escalation via execve()

    An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

    FreeBSD FreeBSD
  • High 7.1
    CVE-2026-25233

    PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0.

    pear pearweb
  • High 8.6
    CVE-2024-20480

    A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edg…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.4
    CVE-2024-44093

    In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. Thi…

    Google Android Android
  • High 7.8
    CVE-2024-34741 Public exploit

    In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be vi…

    Google Android Android
  • High 7.5
    CVE-2024-27886

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. A…

    Apple macOS macOS
  • High 7.8
    CVE-2024-34726

    In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This c…

    Google Android Android
  • High 7.4
    CVE-2024-34720

    In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp,…

    Google Android Android
  • High 7.8
    CVE-2024-31331

    In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic…

    Google Android Android
  • High 8.4
    CVE-2024-31335

    In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in t…

    Google Android Android
  • High 7.8
    CVE-2024-31326

    In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic err…

    Google Android Android
  • High 8.1
    CVE-2024-32896 Exploited

    there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…

    Google Android Android
    KEV Jun 13, 2024
  • High 8.6
    CVE-2024-20314

    A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.8
    CVE-2022-20477

    In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifica…

    Android