Skip to content
OpenAdvisories

Package · PyPI

surfio

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    surfio IRAP header size fields cause out-of-bounds reads

    Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted file…