CVE-2019-15146

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.2

Description The issue is related to a heap-based buffer over-read in the GPMF Next function located in GPMF parser.c. This over-read is 4 bytes in size.

Recommendations For GoPro GPMF-parser version 1.2.2, consider applying a patch or fix that addresses the heap-based buffer over-read issue in the GPMF Next function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.