2.1
Low
CVE-2026-40468 Integer overflow vulnerability has been found in "builtin.c" program file of gawk
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gawk 5.4 | earliest → 5.4.0 | No fix stated |
References
- cgit.git.savannah.gnu.org cgit.git.savannah.gnu.org
- cert.pl cert.pl
Timeline
- Published
- Last modified
Other CVEs of gawk
The 4 CVEs of gawk →
CVE-2026-40553
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine)
5.1
Medium
CVE-2026-40469
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine)
5.1
Medium
CVE-2026-40467
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine)
5.1
Medium