https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:16:38.863339+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-55211 fkie_cve-2026-55211 2026-09-28T10:16:38.890612+00:00

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a web service. This issue is fixed in version 0.0.19.

 https://db.gcve.eu/vuln/ghsa-rcr2-hggw-43wm GHSA-rcr2-hggw-43wm — surfio has an out-of-bounds read 2026-09-28T10:16:38.890673+00:00

Affected: PyPI: surfio

### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.

### Patches The bug has been patched in version 0.0.19

 https://db.gcve.eu/vuln/pysec-2026-3701 PYSEC-2026-3701 — surfio has an out-of-bounds read 2026-09-28T10:16:38.890704+00:00

Affected: PyPI: surfio

### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.

### Patches The bug has been patched in version 0.0.19