Buffer Overflow in Surfio Library for Surface File Parsing

CVE-2026-55211

What is CVE-2026-55211?

The Surfio library, utilized for reading and writing surface files, is vulnerable to a buffer overflow due to improper validation of size fields in IRAP files. This flaw can occur when untrusted files are parsed, particularly in a networking context such as a web service, potentially leading to exploitation. The issue has been resolved in version 0.0.19 of Surfio, which implements the necessary validations to prevent this type of vulnerability.

References