CVE-2026-40553CWE-121

Stack-based buffer overflow in gawk

Medium · published July 13, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-07-13T12:07Z
EPSS history
Timeline
  • 13 JUL 12:07Z
    Stack-based buffer overflow in gawk
    cvelistv5