Buffer Overflow Vulnerability in UUID Library by uuidjs

CVE-2026-41988

What is CVE-2026-41988?

The uuid library, specifically versions prior to 14.0.0, is susceptible to a buffer overflow vulnerability when it interacts with external output buffers. This issue arises particularly when using UUID versions 3, 5, or 6, where unexpected writes can occur, potentially disrupting the integrity and behavior of applications utilizing this library. Notably, UUID version 4 remains unaffected by this issue. Application developers should ensure they are utilizing the most recent versions of the library to mitigate this risk.

References