Equinor vulnerabilities
We track 2 vulnerabilities in Equinor products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Equinor vulnerabilities
- 9.8 Critical severity
surfio: Out-of-bounds Read
Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files
- 9.8 Critical severity
resdata: Buffer Copy without Checking Size of Input
resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDECL files in lib/resdat