[CVE-2026-40553] Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() …

Descripción técnica

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

Gawk — Fossies

Debilidades (CWE)

CWE-121

Fuente oficial

Publicado en NIST NVD.