← Back

CVE-2026-41988

nvd nist
Published: Apr 23, 2026Modified: Jul 8, 2026

JSON object

Loading...
2.5
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.0 / Impact: 1.4
Source: NVD

Description

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Affected (3)

Products: Uuidjs: Uuid
Uuidjs
1 product
Uuid
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Uuidjs
Uuid
Before 11.1.1
Uuid
Version 12.0.0
Uuid
Version 13.0.0

Related CWEs

CWE-670
Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

References (3)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
ExploitVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitVendor Advisory

Timeline

No history available yet.