VYPR

surfio

by Surfio

Source repositories

CVEs (1)

  • CVE-2026-55211CriSep 15, 2026
    risk 0.57cvss 9.8epss 0.01

    Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking…