129 matches found
MAL-2025-6932 Malicious code in gopro-plus-downloader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae The OpenSSF Package Analysis project identified 'gopro-plus-downloade...
Malicious code in gopro-plus-downloader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae The OpenSSF Package Analysis project identified 'gopro-plus-downloade...
CVE-2020-16159
GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMFScaledData. Parsing malicious input can result in a crash or information disclosure...
CVE-2020-16161
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFScaledData. Parsing malicious input can result in a crash...
CVE-2020-16158
GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...
CVE-2020-16160
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMFDecompress. Parsing malicious input can result in a crash...
CVE-2019-15147
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMFNext in GPMFparser.c...
CVE-2019-15146
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read 4 bytes in GPMFNext in GPMFparser.c...
CVE-2019-15148
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMFmp4reader.c...
CVE-2019-20089
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMFSeekToSamples in GPMFparse.c for the size calculation...
Malicious code in gopro-web-javascript-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd5c887f1ae7f927a94580db5eb195ca0a078262261f58af907566bcda2568e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gopro-web-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92efeb06ccdce0e059e85ee0eb6a41abf4316b7bbcf877159ecfbcfe0a6329d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3420 Malicious code in gopro-web-javascript-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd5c887f1ae7f927a94580db5eb195ca0a078262261f58af907566bcda2568e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3421 Malicious code in gopro-web-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92efeb06ccdce0e059e85ee0eb6a41abf4316b7bbcf877159ecfbcfe0a6329d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
(0Day) GoPro Player MOV File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GoPro Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...
(0Day) GoPro Player MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GoPro Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...
(0Day) GoPro Player MOV File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GoPro Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of MOV...
CVE-2020-16158
GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...