Stack Overflow Vulnerability in BusyBox's AWK Script Processing

CVE-2026-38752

What is CVE-2026-38752?

A security flaw in the BusyBox software allows for a stack overflow in the evaluate() function related to AWK script execution. By sending a specially crafted AWK script, attackers can trigger a Denial of Service (DoS) condition, potentially disrupting system functionality. Users of BusyBox should take immediate action to assess their installations and apply necessary updates to mitigate this vulnerability.

References