CVE-2026-40468: Heap buffer overflow in gawk
Heap buffer overflow in gawk
Other sources
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.2.2-2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40468?
The severity of CVE-2026-40468 is classified as low with a CVSS score of 4.0.
How do I fix CVE-2026-40468?
To fix CVE-2026-40468, update gawk to version 5.4.1 or higher.
What causes CVE-2026-40468?
CVE-2026-40468 is caused by an integer overflow vulnerability in the 'builtin.c' file of gawk.
What systems are affected by CVE-2026-40468?
CVE-2026-40468 affects gawk versions 5.4.0 and below.
What are the potential impacts of CVE-2026-40468?
The potential impacts of CVE-2026-40468 include memory exhaustion and the possibility of overwriting gawk heap metadata.