Logo
vulnerabilityCVE-2026-38753
Name
CVE-2026-38753
Source
NVD ( link)Debian ( link)
Description
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
busybox
Exploitable

Vulnerability Ratings#


4.9
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.37.0
Not Affected
buildroot
master
1.38.0
Exploitable
openwrt
openwrt-25.12
1.37.0-r6
Not Affected
yocto
kirkstone
1.35.0
Not Affected
yocto
master
1.38.0
Exploitable
yocto
scarthgap
1.36.1
Not Affected