CVE-2019-20086

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-12-30

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Gpmf-parser (Gopro)

References

• https://github.com/gopro/gpmf-parser/issues/74