Improper Memory Buffer Handling

🗓️ 12 May 2026 14:12:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 9 Views

Improper memory buffer handling in UUID generation due to missing buffer size and offset validation.

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses uuid-8.3.2.tgz, uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907	29 May 202610:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: TDI is vulnerable to do not reject out of range writes due to uuid-11.1.0 - CVE-2026-41907	25 May 202611:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in uuid-3.3.2.tgz	9 Jun 202615:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907.	23 Jun 202613:44	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in uuid-9.0.1.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-41907)	29 May 202609:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988, CVE-2026-41907	1 Jun 202608:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Jun 202607:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41988, CVE-2026-41907	1 Jun 202611:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in uuid (CVE-2026-41907)	31 May 202616:46	–	ibm

Vulners

Node

uuid uuidRange11.0.0-0–11.1.0js

uuid uuidRange12.0.0–13.0.2js

uuid uuidRange0.0.1–11.1.0js

uuid uuidMatch12.0.0js

uuid uuidMatch13.0.0js

webjars uuidRange2.0.2–13.0.0js

Source	Link
github	www.github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34
github	www.github.com/uuidjs/uuid/releases/tag/v14.0.0
github	www.github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq
github	www.github.com/advisories/GHSA-w5hq-g745-h8pq
github	www.github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq

20 Jun 2026 08:21Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

CVSS 49.3

EPSS0.00337

SSVC