https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:16:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-55211 <p>Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a web service. This issue is fixed in version 0.0.19.</p> <p>Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a web service. This issue is fixed in version 0.0.19.</p> https://db.gcve.eu/vuln/fkie_cve-2026-55211 https://db.gcve.eu/vuln/ghsa-rcr2-hggw-43wm <p><strong>Affected:</strong> PyPI: surfio</p> <p>### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.</p> <p>### Patches The bug has been patched in version 0.0.19</p> <p><strong>Affected:</strong> PyPI: surfio</p> <p>### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.</p> <p>### Patches The bug has been patched in version 0.0.19</p> https://db.gcve.eu/vuln/ghsa-rcr2-hggw-43wm https://db.gcve.eu/vuln/pysec-2026-3701 <p><strong>Affected:</strong> PyPI: surfio</p> <p>### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.</p> <p>### Patches The bug has been patched in version 0.0.19</p> <p><strong>Affected:</strong> PyPI: surfio</p> <p>### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer overflow . The severity rating assumes that surfio is used to parse untrused files in a networking context such as a web service.</p> <p>### Patches The bug has been patched in version 0.0.19</p> https://db.gcve.eu/vuln/pysec-2026-3701