CVE-2020-16160

Name of the Vulnerable Software and Affected Versions GoPro gpmf-parser version 1.5

Description The issue is related to a division-by-zero vulnerability in the GPMF Decompress() function. This vulnerability can be triggered by parsing malicious input, which may result in a crash.

Recommendations For GoPro gpmf-parser version 1.5, consider avoiding the use of the GPMF Decompress() function until a patch is available. As a temporary workaround, restrict the input to the GPMF Decompress() function to prevent malicious data from being parsed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.