CVE-2026-40553mediumCWE-121

CVE-2026-40553: medium-severity vulnerability in GNU gawk

Stack-based buffer overflow in gawk

Published

Follow this CVE+ Monitor gawk+ Monitor gawk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.3%
Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L
Affected products
GNU · gawk
Related CVEs — GNU gawk

In the same product, most dangerous first.

CVE-2026-40469MEDIUMHeap buffer overflow in gawkEPSS 0.2%CVE-2026-40467MEDIUMUse after free in gawkEPSS 0.2%CVE-2026-40468LOWHeap buffer overflow in gawkEPSS 0.2%