PT-2026-57813 · Gnu · Gawk

Marcin Wyczechowski + 1 · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-40468

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier

Description An integer overflow occurs in the builtin.c file. This issue can result in memory exhaustion on the hosting operating system and allow the overwriting of heap metadata and objects with attacker-controlled bytes. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.

Recommendations Update gawk to a version later than 5.4.0.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-40468

Affected Products

Gawk

References · 6

• https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-40468 · Security Note
• https://twitter.com/CVEnew/status/2076722757245587748 · Twitter Post
• https://cert.pl/en/posts/2026/07/CVE-2026-40467 · Note
• https://twitter.com/infoflowcloud/status/2076723693170905137 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2076811419039699256 · Twitter Post