CVE-2026-55211 in surfio
要約
〜によって MITRE • 2026年09月15日
Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a web service. This issue is fixed in version 0.0.19.
If you want to get best quality of vulnerability data, you may have to visit VulDB.