Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gawkUpgrade gawk-all-langpacks | Oct 11, 2026 | Sep 29, 2026 |
| Amazon_linux_2023 | — | Upgrade gawk-develUpgrade gawk-docUpgrade gawk-all-langpacksUpgrade gawk-debuginfoUpgrade gawkUpgrade gawk-debugsource | Aug 10, 2026 | Jul 13, 2026 |
| Oracle_linux | — | Upgrade gawkUpgrade gawk-all-langpacks | Oct 22, 2026 | Jul 13, 2026 |
| Redhat_linux | — | No solution existsUpgrade gawk-debuginfoUpgrade gawkUpgrade gawk-debugsourceUpgrade gawk-all-langpacks | Aug 4, 2026 | Jul 13, 2026 |
| Rocky_linux | — | Upgrade gawk-debugsourceUpgrade gawkUpgrade gawk-all-langpacksUpgrade gawk-debuginfo | Oct 5, 2026 | Sep 30, 2026 |
| Ubuntu | — | Upgrade gawk (Ubuntu Pro)Upgrade gawk | Jul 23, 2026 | Jul 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 31, 2026 | Jul 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub