GoPro GPMF-parser 1.2.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gopro:gpmf-parser:1.2.3:*:*:*:*:*:*:*

part: a version: 1.2.3 update: *

VendorGopro (c4b3fc58-7fb9-57d9-b06b-d35df1125a35)
ProductGpmf Parser (3d0d8bf1-60cd-5ea8-ab91-df47f1f6fdc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gopro/gpmf-parser purl2cpe 2026-06-01 10:16:48.123297

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20089 vulnerable 2026-06-08 05:13:30.476131 Details available
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
Published: 2019-12-30T03:48:51.000Z
Updated: 2024-08-05T02:32:10.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20088 vulnerable 2026-06-08 05:13:30.475734 Details available
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
Published: 2019-12-30T03:49:00.000Z
Updated: 2024-08-05T02:32:10.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20087 vulnerable 2026-06-08 05:13:30.475431 Details available
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
Published: 2019-12-30T03:49:09.000Z
Updated: 2024-08-05T02:32:10.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20086 vulnerable 2026-06-08 05:13:30.475032 Details available
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
Published: 2019-12-30T03:49:20.000Z
Updated: 2024-08-05T02:32:10.500Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.