surfio vulnerabilities

CVEs whose affected-version data names the surfio package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55211Critical· 9.8

1w ago

Surfio is a library for reading and writing surface files

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used t…

▾ Midnightequinor · surfioEPSS 0.54%via NVD