5.1
Medium
CVE-2026-40469 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine)
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gawk 5.4 | earliest → 5.4.0 | No fix stated |
References
- cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org
- cert.pl cert.pl
Timeline
- Published
- Last modified
Other CVEs of gawk
The 4 CVEs of gawk →
CVE-2026-40553
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine)
5.1
Medium
CVE-2026-40468
Integer overflow vulnerability has been found in "builtin.c" program file of gawk
2.1
Low
CVE-2026-40467
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine)
5.1
Medium