Skip to content
OpenAdvisories

Weakness (CWE)

CWE-783: Operator Precedence Logic Error

Base Draft

The product uses an expression in which operator precedence causes incorrect logic to be used.

How to prevent it (1 mitigation)

  1. Implementation

    Regularly wrap sub-expressions in parentheses, especially in security-critical code.

Source: MITRE CWE-783

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2025-27512

    Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods

    Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpmostree1.finalize-dep…

    coreos zincati zincati crates.io