Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-24 | 1 | Disclosure1 |
| 2026-04-25 | 1 | Disclousre1 |
CVE-2026-41907 Buffer Overflow in UUID Library Versions Prior to 14.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41907
Post summary
The post announces a buffer‑overflow vulnerability in UUID libraries before version 14.0.0 but provides no further technical or exploit details, patch info, or evidence of exploitation.
CVE-2026-41907 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (sm… https://www.cve.org/CVERecord?id=CVE-2026-41907
Post summary
CVE-2026-41907 describes a buffer overflow in the uuid library (versions <14.0.0) where v3, v5, and v6 functions accept external buffers without rejecting out-of-range writes.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | uuidjs | uuid | - | node.js | - |
| App | uuidjs | uuid | 12.0.0 | node.js | - |
| App | uuidjs | uuid | 13.0.0 | node.js | - |