The vulnerability is an integer overflow in gawk's builtin.c source code, affecting gawk versions 5.4.0 and earlier. Exploitation could cause memory exhaustion and heap metadata corruption, potentially allowing an attacker to manipulate memory objects within gawk. The issue is present in various Ubuntu package versions of gawk, spanning multiple Ubuntu LTS releases. There is no indication of known exploits in the wild or a vendor-provided patch status in the provided data.

Successful exploitation may lead to memory exhaustion on the host system and corruption of gawk heap metadata and objects, which could result in denial of service or potentially arbitrary code execution within the context of gawk. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting untrusted input to gawk and monitoring for abnormal resource consumption related to gawk processes.