GoPro GPMF-parser heap buffer overflow vulnerability (CNVD-2020-03707)

GoPro gpmf-parser is a GPMF format telemetry data parser for use in GoPro cameras from GoPro USA. A buffer overflow vulnerability exists in the 'GPMFseekToSamples' function of the GPMF-parse.c file in GoPro GPMF-parser version 1.2.3. The vulnerability stems from a networked system or product...

PT-2019-16086

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF SeekToSamples function within GPMF parse.c, specifically affecting the size calculation. Recommendations For GoPro GPMF-parser versio...

PT-2019-16084

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF seekToSamples function, located in GPMF-parse.c, which is part of the "matching tags" feature. Recommendations For GoPro GPMF-parser...