CVE-2020-16159

概要

参考情報

• blog.inhq.net/posts/gopro-gpmf-parser-vuln-1 · Exploit
• gopro/gpmf-parser · Exploit

gpmf-parser のその他の脆弱性

• CVE-2020-16161高 7.5GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash.
• CVE-2020-16160高 7.5GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash.
• CVE-2020-16158高 8.8GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result …
• CVE-2019-20089高 7.8GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
• CVE-2019-20088高 7.8GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.