← CVE Radar
CVE-2026-40468Heap buffer overflow in gawk
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
2.1 LOWEPSS 0.20%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 2.1 | LOW | 4.0CERT-PL (CNA) | CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L |
| 9.1 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Details
- CVE ID
- CVE-2026-40468
- Status
- Analyzed
- Assigner (CNA)
- CERT-PL
- Published
- Jul 13, 2026
- Last modified
- 2026-10-24 22:10 UTC
- Weaknesses
- CWE-190 · Integer Overflow or Wraparound
Affected Products
As published by the CNA in the CVE record.
GNUgawk1 version range
- through 5.4.0