Vulnerabilities (CVE)

Filtered by vendor Gopro Subscribe
Filtered by product Gpmf-parser
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-16160 1 Gopro 1 Gpmf-parser 2020-10-29 5.0 MEDIUM 7.5 HIGH
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash.
CVE-2020-16161 1 Gopro 1 Gpmf-parser 2020-10-29 5.0 MEDIUM 7.5 HIGH
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash.
CVE-2020-16158 1 Gopro 1 Gpmf-parser 2020-10-22 6.8 MEDIUM 8.8 HIGH
GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result in a crash or potentially arbitrary code execution.
CVE-2019-20086 1 Gopro 1 Gpmf-parser 2020-01-08 6.8 MEDIUM 8.8 HIGH
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
CVE-2019-20087 1 Gopro 1 Gpmf-parser 2020-01-08 6.8 MEDIUM 8.8 HIGH
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
CVE-2019-20088 1 Gopro 1 Gpmf-parser 2020-01-07 6.8 MEDIUM 7.8 HIGH
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
CVE-2019-20089 1 Gopro 1 Gpmf-parser 2020-01-07 6.8 MEDIUM 7.8 HIGH
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
CVE-2018-18699 1 Gopro 1 Gpmf-parser 2018-12-06 6.8 MEDIUM 8.8 HIGH
An issue was discovered in GoPro gpmf-parser 1.2.1. There is an out-of-bounds write in OpenMP4Source in GPMF_mp4reader.c.