CVE-2026-40468 — Heap buffer overflow in gawk
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to …
Published: 2026-07-13 · CVSS: 2.1 · CVSS 4.0
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7