PT-2026-57812 · Gawk · Gawk

Marcin Wyczechowski + 1 · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-40467

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier

Description A Use After Free issue exists in the io.c file within the do getline redir() function. This flaw can result in a program crash. Use After Free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update gawk to a version later than 5.4.0.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-40467

Affected Products

Gawk

References · 6

• https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-40467 · Security Note
• https://twitter.com/infoflowcloud/status/2076723710422036559 · Twitter Post
• https://twitter.com/CVEnew/status/2076722759032254486 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2076808857431499262 · Twitter Post
• https://cert.pl/en/posts/2026/07/CVE-2026-40467 · Note