CVE Catalog
CVE-2026-38752
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
A stack overflow vulnerability exists in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9. Attackers can cause a Denial of Service (DoS) by supplying a crafted AWK script.
Risk Assessment
The risk involves potential remote or local system crashes via malicious AWK scripts, which may disrupt critical organizational services.
Recommendation
Immediately update BusyBox to a patched version or apply a temporary workaround, such as restricting access to the AWK interpreter.
Original NVD description (English source)
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.