CVE-2019-20089

2019-12-3004:15:10

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.

CPENameOperatorVersion
gpmf-parsereq1.1.1
gpmf-parsereq1.2.1
gpmf-parsereq1.2.3
gpmf-parsereqV1.2.2
gpmf-parsereq1.1
gpmf-parsereq1.1.2
gpmf-parsereq1.2
gpmf-parsereq1.2.2
gpmf-parsereq1.0
gpmf-parsereq1.01

Name	Operator	Version
gpmf-parser	eq	1.1.1
gpmf-parser	eq	1.2.1
gpmf-parser	eq	1.2.3
gpmf-parser	eq	V1.2.2
gpmf-parser	eq	1.1
gpmf-parser	eq	1.1.2
gpmf-parser	eq	1.2
gpmf-parser	eq	1.2.2
gpmf-parser	eq	1.0
gpmf-parser	eq	1.01

References

github.com/gopro/gpmf-parser/issues/75