CVE-2026-38753

A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

CVE-2026-38752

A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

CVE-2026-38753

The CVE describes a use-after-free in Busybox v1.38.0 affecting the awk_sub() routine in editors/awk.c, enabling a crafted AWK script to trigger a Denial of Service. The available connected sources confirm the vulnerable function and file path, and identify Busybox v1.38.0 as affected. No explici...