Gopro: >> Gpmf-Parser >> 1.2.2 Security Vulnerabilities
GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result in a crash or potentially arbitrary code execution.
CVSS Score
8.8
EPSS Score
0.009
Published
2020-10-19
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
CVSS Score
6.5
EPSS Score
0.002
Published
2019-08-18
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
CVSS Score
6.5
EPSS Score
0.002
Published
2019-08-18
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
CVSS Score
6.5
EPSS Score
0.002
Published
2019-08-18