cvedb.io
CVE-2026-40468
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2026-07-13T13:16:36.907 · Last modified 2026-07-13T13:16:36.907

Summary

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.