CVE-2020-16160

Description

References

• blog.inhq.net/posts/gopro-gpmf-parser-vuln-1 · Exploit
• gopro/gpmf-parser · Exploit

More vulnerabilities in gpmf-parser

• CVE-2020-16161HIGH 7.5GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash.
• CVE-2020-16159CRITICAL 9.1GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or info…
• CVE-2020-16158HIGH 8.8GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result …
• CVE-2019-20089HIGH 7.8GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
• CVE-2019-20088HIGH 7.8GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.