CVE-2026-55211 is a critical vulnerability in surfio with a CVSS score of 9.8, classified as an out-of-bounds read flaw in the irap file parsing component. The bug occurs when size fields are not correctly validated prior to version 0.0.19, leading to a buffer overflow and potentially allowing attackers to read arbitrary files. This issue assumes surfio is used to parse untrusted files in a networking context such as a web service, which could result in high privileges being gained and sensitive data accessed. The severity rating of this vulnerability is critical due to its potential impact on business operations, data confidentiality, and system integrity.
We recommend you to update surfio to version 0.0.19.[/subscribe_to_unlock_form]
CVE-2026-55211 is a critical vulnerability in surfio with a CVSS score of 9.8, classified as an out-of-bounds read flaw in the irap file parsing component. The bug occurs when size fields are not correctly validated prior to version 0.0.19, leading to a buffer overflow and potentially allowing attackers to read arbitrary files. This issue assumes surfio is used to parse untrusted files in a networking context such as a web service, which could result in high privileges being gained and sensitive data accessed. The severity rating of this vulnerability is critical due to its potential impact on business operations, data confidentiality, and system integrity.
We recommend you to update surfio to version 0.0.19.[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]