PT-2020-14781
CVE-2020-16159
·
Published
2020-10-19
·
Updated
2020-10-29
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GoPro gpmf-parser version 1.5
Description
The issue is related to a heap out-of-bounds read and segfault in the
GPMF ScaledData() function. Parsing malicious input can result in a crash or information disclosure.Recommendations
For GoPro gpmf-parser version 1.5, update to a newer version that contains a fix for this issue to prevent potential crashes or information disclosure.
Found an issue in the description? Have something to add? Feel free to write us 👾