CVE-2026-41988

LowCVSS 2.5/10Last modified Jul 8, 2026

Description

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Metrics

CVSS 3.1 2.5/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-670

Affected software

No affected versions have been published.

Timeline

Published
Apr 23, 2026
Last modified
Jul 8, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-419896.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.CVE-2026-41995.3A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0. Affected by this issue is the function installDependencies of thCVE-2026-419904.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.CVE-2026-419914.7GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not availableCVE-2026-419927.5GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state betwCVE-2026-419934.4Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with admCVE-2026-419994.8Incorrect Behaviour of Views with TCP PROXY RequestsCVE-2026-42007.3A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This affects the function uploadTestCVE-2026-420008.6Insufficient Validation of Names During AXFRCVE-2026-420017.5Insufficient Validation of Autoprimary SOA QueriesCVE-2026-420027.5Concurrency and locking defects in GSS-TSIGCVE-2026-420043.7An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT recor
CVE-2026-41988: Low severity, CVSS 2.5 | Vulnix