2.1
Faible
CVE-2026-40468 Integer overflow vulnerability has been found in "builtin.c" program file of gawk
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| gawk 5.4 | premières → 5.4.0 | Pas de correctif indiqué |
Autres CVE de gawk
Les 4 CVE de gawk →
CVE-2026-40553
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine)
5.1
Moyenne
CVE-2026-40469
Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine)
5.1
Moyenne
CVE-2026-40467
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine)
5.1
Moyenne