Critical severity9.1NVD Advisory· Published Jul 13, 2026· Updated Jul 14, 2026
CVE-2026-40468
CVE-2026-40468
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Affected products
3Patches
Vulnerability mechanics
References
2- cgit.git.savannah.gnu.org/cgit/gawk.git/commit/nvdPatch
- cert.pl/en/posts/2026/07/CVE-2026-40467nvdThird Party Advisory
News mentions
1- Patch Tuesday - July 2026Rapid7 Blog · Jul 14, 2026