Skip to content

Product

debian/gawk vulnerabilities

5 published CVES affecting debian/gawk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
1
Medium
3
Low
1
Unscored
0
CISA KEV
0

Latest debian/gawk CVEs

Newest publication first

  1. CVE-2026-40553 Stack-based buffer overflow in gawk

    Published
    MediumCVSS 5.1

    Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in ver...

  2. CVE-2026-40469 Heap buffer overflow in gawk

    Published
    MediumCVSS 5.1

    Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

  3. CVE-2026-40468 Heap buffer overflow in gawk

    Published
    LowCVSS 2.1

    Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5....

  4. CVE-2026-40467 Use after free in gawk

    Published
    MediumCVSS 5.1

    Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.