CVE-2020-16161

Description

References

• blog.inhq.net/posts/gopro-gpmf-parser-vuln-1 · Exploit
• gopro/gpmf-parser · Exploit
• gopro/gpmf-parser · Exploit

Weitere Schwachstellen in gpmf-parser

• CVE-2020-16160HOCH 7.5GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash.
• CVE-2020-16159KRITISCH 9.1GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or info…
• CVE-2020-16158HOCH 8.8GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result …
• CVE-2019-20089HOCH 7.8GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
• CVE-2019-20088HOCH 7.8GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.