CVE-2026-41988
LowCVSS 3.2Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A vulnerability in the uuid library before version 14.0.0 allows unexpected writes to external output buffers when generating UUID versions 3, 5, or 6. UUID version 4, which is very commonly used, is unaffected by this issue.
Risk Assessment
The risk involves potential data corruption or memory integrity issues in applications using external output buffers with UUID versions 3, 5, or 6, which may lead to unpredictable system behavior.
Recommendation
It is recommended to immediately update the uuid library to version 14.0.0 or later. If an update is not possible, avoid using UUID versions 3, 5, and 6 with external output buffers.
Original NVD description (English source)
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.