An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain checks for GPMF_KEY_END and nest_level (not conditional on a buffer_size_longs check).
References
Link | Resource |
---|---|
https://github.com/gopro/gpmf-parser/issues/29 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-06-29 07:29
Updated : 2018-08-21 05:10
NVD link : CVE-2018-13007
Mitre link : CVE-2018-13007
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
gopro
- gpmf-parser