CVE-2026-40553: Stack-based buffer overflow in gawk
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.2.2-2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40553?
The severity of CVE-2026-40553 is rated as medium with a CVSS score of 5.1.
How do I fix CVE-2026-40553?
To fix CVE-2026-40553, update to gawk version 5.4.1 or later.
What type of vulnerability is CVE-2026-40553?
CVE-2026-40553 is a buffer overflow vulnerability found in the gawk software.
What impact can CVE-2026-40553 have on my system?
CVE-2026-40553 can potentially crash the gawk program and may allow for code execution, although this has not been confirmed.
Which versions of gawk are affected by CVE-2026-40553?
CVE-2026-40553 affects gawk versions 5.4.0 and below.