This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-40553 →

DEBIAN-CVE-2026-40553

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the pr...

Original description

The description as published by the source.

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 gawk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org