5.1
Medium
CVE-2026-40553 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine)
Description
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gawk 5.4 | earliest → 5.4.0 | No fix stated |
References
- cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org
- cert.pl cert.pl
Timeline
- Published
- Last modified
Other CVEs of gawk
The 4 CVEs of gawk →
CVE-2026-40469
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine)
5.1
Medium
CVE-2026-40468
Integer overflow vulnerability has been found in "builtin.c" program file of gawk
2.1
Low
CVE-2026-40467
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine)
5.1
Medium