Logo
vulnerabilityCVE-2026-40468
Name
CVE-2026-40468
Source
NVD ( link)Debian ( link)
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
gawk
Patched

Vulnerability Ratings#


2.1
CVSSv4
9.1
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
kirkstone
5.1.1
Exploitable
yocto
master
5.4.1
Not Affected

Resolved with patches#


gawk (yocto:scarthgap)

#
Title
Author
Resolve
1
Minor integer overflow fixes.
"Arnold D. Robbins" <arnold@skeeve.com>
CVE-2026-40468