Known Vulnerabilities for Gpmf-parser by Gopro
Listed below are 10 of the newest known vulnerabilities associated with "Gpmf-parser" by "Gopro".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-16161 json | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a cras... | 7.5 - HIGH | 2020-10-19 | 2020-10-29 |
| CVE-2020-16160 json | GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a cras... | 7.5 - HIGH | 2020-10-19 | 2020-10-29 |
| CVE-2020-16159 json | GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in ... | 9.1 - CRITICAL | 2020-10-19 | 2020-10-29 |
| CVE-2020-16158 json | GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious in... | 8.8 - HIGH | 2020-10-19 | 2020-10-22 |
| CVE-2019-20089 json | GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation. | 7.8 - HIGH | 2019-12-30 | 2020-01-07 |
| CVE-2019-20088 json | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c. | 7.8 - HIGH | 2019-12-30 | 2020-01-07 |
| CVE-2019-20087 json | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" featu... | 8.8 - HIGH | 2019-12-30 | 2020-01-08 |
| CVE-2019-20086 json | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c. | 8.8 - HIGH | 2019-12-30 | 2020-01-08 |
| CVE-2019-15148 json | GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c. | 6.5 - MEDIUM | 2019-08-18 | 2019-08-22 |
| CVE-2019-15147 json | GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c. | 6.5 - MEDIUM | 2019-08-18 | 2019-08-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gopro | Gpmf-parser | 1.5 | |||
| Application | Gopro | Gpmf-parser | 1.2.3 | |||
| Application | Gopro | Gpmf-parser | 1.2.2 | |||
| Application | Gopro | Gpmf-parser | 1.2.1 | |||
| Application | Gopro | Gpmf-parser | 1.2 | |||
| Application | Gopro | Gpmf-parser | 1.1.2 | |||
| Application | Gopro | Gpmf-parser | 1.1.1 | |||
| Application | Gopro | Gpmf-parser | 1.01 | |||
| Application | Gopro | Gpmf-parser | 1.0 | |||
| Application | Gopro | Gpmf-parser | - |