CVE-2019-20087

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-12-30

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Gpmf-parser (Gopro)

References

• https://github.com/gopro/gpmf-parser/issues/76