CVE-2026-40468

ADVISORY - debian

Summary

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

gawk (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1142071) [trixie] - gawk (Minor issue) Fixed by: https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7

EPSS Score⁠: 0.00201 (0.103)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.