Gawk (Gnu) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-13. Vendor: Gnu.

CVEs of Gawk

• CVE-2026-40553 - CVSS 7.5 (high), 2026-07-13: Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program…
• CVE-2026-40469 - CVSS 9.1 (critical), 2026-07-13: Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata…
• CVE-2026-40468 - CVSS 9.1 (critical), 2026-07-13: Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system…
• CVE-2026-40467 - CVSS 7.5 (high), 2026-07-13: Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in…
• CVE-2023-4156 - CVSS 7.1 (high), 2023-09-25: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.