Heap overflow

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

CVE-2018-13008

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

CVE-2018-13009

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

CVE-2018-13009

The CVE-2018-13009 entry concerns gpmf-parser 1.1.2, with a heap-based buffer over-read in GPMF_Next of GPMF_parser.c caused by certain checks for GPMF_KEY_END and nest_level (conditional on buffer_size_longs). Impact is high per CVSS (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No remediation details ...

CVE-2018-13007

CVE-2018-13007 affects gpmf-parser 1.1.2. The issue is a heap-based buffer over-read in GPMF_Next of GPMF_parser.c, linked to checks for GPMF_KEY_END and nest_level that are not conditioned on a buffer_size_longs check. Public sources describe a heap-based out-of-bounds read with high/critical im...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

CVE-2018-13008

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13009

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

CVE-2018-13008

CVE-2018-13008 affects the gpmf-parser 1.1.2 library. The vulnerability is a heap-based buffer over-read in the function the documents name as GPMF_Next inside GPMF_parser.c, triggered by certain checks for a positive nest_level. The connected records corroborate this as the same issue across mul...