Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-40469 →

DEBIAN-CVE-2026-40469

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org