| Package | Affected versions | Patched versions |
|---|---|---|
| gpmf-parser | = 1.1.2 |
An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain checks for GPMF_KEY_END and nest_level (conditional on a buffer_size_longs check).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free