Bug 2461639 (CVE-2026-41907) - CVE-2026-41907 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality
Summary: CVE-2026-41907 uuid: uuid: Out-of-bounds write vulnerability impacts data int...
Keywords:
Status: NEW
Alias: CVE-2026-41907
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-04-24 19:03 UTC by OSIDB Bzimport
Modified: 2026-05-07 16:56 UTC (History)
165 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-04-24 19:03:06 UTC 
uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.
Note You need to log in before you can comment on or make changes to this bug.