5.1Mittel
CVE-2026-40467Use after free in gawk
Beschreibung
Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8 patchPatch
- https://cert.pl/en/posts/2026/07/CVE-2026-40467 third-party-advisoryThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:fossies:gawk:*:*:*:*:*:*:*:*≤ 5.4.0