Fossies Gawk — CVE-2026-40468 (Critical)

Date Jul 13, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Fossies · Gawk

CVE CVE-2026-40468

Critical vendor advisory CVE-2026-40468

Summary

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.1) in Fossies Gawk. Patch or mitigate promptly.

Operator check

Review CVE-2026-40468 in your asset inventory. Apply patches per vendor guidance and verify Gawk is not exposed. CVSS score: 9.1.

Sources

NVD — CVE-2026-40468 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed