Logo
vulnerabilityCVE-2026-40553
Name
CVE-2026-40553
Source
NVD ( link)Debian ( link)
Description
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
gawk
Patched

Vulnerability Ratings#


5.1
CVSSv4
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
kirkstone
5.1.1
Exploitable
yocto
master
5.4.1
Not Affected

Resolved with patches#


gawk (yocto:scarthgap)

#
Title
Author
Resolve
1
Small fix in extension/readdir.c.
"Arnold D. Robbins" <arnold@skeeve.com>
CVE-2026-40553
2
Avoid buffer overflow in extension/readdir.c.
"Arnold D. Robbins" <arnold@skeeve.com>
CVE-2026-40553