CVE-2026-40469Disclosure(fossies / gawk)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch fossies gawk systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

fossies CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=ae1b2d508f46913269a9e62aceda3636afe8147b

Vendor / third-party advisories

https://cert.pl/en/posts/2026/07/CVE-2026-40467

Weakness type (CWE)

CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gawk

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 3 mentions (2026-07-13); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

fossies

Products

gawk

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Disclosure

360.0%

Patch

120.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-13	3	Disclosure3
2026-07-20	1	Patch1
2026-08-10	1	General1

Full discourse5 posts

takenaka hiroya@Joe_Biden_ja63d
General
gawk の整数オーバーフロー CVE-2026-40469 はスコアの読み方に注意が要ります。NVD の CVSS 3.1 は 9.1 ですが、同じ NVD の 4.0 は 5.1 でローカル評価。対象は 32bit ビルドの 5.4.0 以下だけで、Debian は現時点で… https://cve.autoarticles.net/cve/CVE-2026-40469
Post summary
The post discusses the integer‑overflow vulnerability CVE‑2026‑40469 in gawk, highlighting affected versions and differing CVSS scores, without providing PoC, exploit, or patch details.
0000071
562 followersView on X
VulniPulse@vulnipulse85d
Patch
⚠️ Linux Red Hat Hardened Images alert: CVE-2026-40469 (CVSS 2.8) Attackers could disrupt service or cause a denial of service. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-40469 #Linux #RedHatHardenedImages #CyberSecurity #CVE
Post summary
A Red Hat advisory for CVE‑2026‑40469 warns of a potential denial‑of‑service attack and recommends upgrading to the vendor‑fixed release.
0000038
6 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-40469 Integer Overflow Vulnerability in gawk 5.4.0 and Below 32-bit Builds https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40469
Post summary
The post announces CVE-2026-40469, an integer‑overflow flaw in gawk 5.4.0 and earlier 32‑bit builds, but provides no PoC, exploit, or remediation details.
0000087
4.1K followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-40469 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and obj… https://www.cve.org/CVERecord?id=CVE-2026-40469 ----- Traducción: La vulnerabilidad … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-40469, describing an integer overflow in gawk’s do_sub routine that could corrupt heap metadata, with no PoC, exploit, or patch information provided.
0000049
92 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-40469 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and obj… https://www.cve.org/CVERecord?id=CVE-2026-40469
Post summary
The entry announces an integer overflow in gawk’s do_sub routine that could overwrite heap metadata, but no PoC, exploit, active use, patch, or false‑positive claim is provided.
00000652
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	fossies	gawk	-	-	-

Explore more

Back to dashboard fossies CVEs gawk vulnerabilities

What researchers are saying

CVE-2026-40469

VulniPulse[verified]@vulnipulsePatch

A Red Hat advisory for CVE‑2026‑40469 warns of a potential denial‑of‑service attack and recommends upgrading to the vendor‑fixed release.

takenaka hiroya@Joe_Biden_jaGeneral

The post discusses the integer‑overflow vulnerability CVE‑2026‑40469 in gawk, highlighting affected versions and differing CVSS scores, without providing PoC, exploit, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-40469, an integer‑overflow flaw in gawk 5.4.0 and earlier 32‑bit builds, but provides no PoC, exploit, or remediation details.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-40469, describing an integer overflow in gawk’s do_sub routine that could corrupt heap metadata, with no PoC, exploit, or patch information provided.

CVE@CVEnewDisclosure

The entry announces an integer overflow in gawk’s do_sub routine that could overwrite heap metadata, but no PoC, exploit, active use, patch, or false‑positive claim is provided.