CVE-2019-20089

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3

Description The issue is related to a heap-based buffer over-read in the GPMF SeekToSamples function within GPMF parse.c, specifically affecting the size calculation.

Recommendations For GoPro GPMF-parser version 1.2.3, consider applying a patch or fix that corrects the size calculation in the GPMF SeekToSamples function to prevent the heap-based buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.