CVE-2019-20087

GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.

• CWE-125

• https://github.com/gopro/gpmf-parser/issues/76Exploit, Issue Tracking, Third Party Advisory
• https://github.com/gopro/gpmf-parser/issues/76Exploit, Issue Tracking, Third Party Advisory

Published

Dec 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20077The Typesetter CMS 5.1 logout functionality is affected by a…4.3
• CVE-2019-20079The autocmd feature in window.c in Vim before 8.1.2136 acces…7.8
• CVE-2019-2008In createEffect of AudioFlinger.cpp, there is a possible mem…
• CVE-2019-20082ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow …9.8
• CVE-2019-20085TVT NVMS-1000 devices allow GET /.. Directory Traversal7.5
• CVE-2019-20086GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in…8.8
• CVE-2019-20088GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in…7.8
• CVE-2019-20089GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read i…7.8
• CVE-2019-2009In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out o…
• CVE-2019-20090An issue was discovered in Bento4 1.5.1.0. There is a use-af…7.8
• CVE-2019-20091An issue was discovered in Bento4 1.5.1.0. There is a NULL p…5.5
• CVE-2019-20092An issue was discovered in Bento4 1.5.1.0. There is a NULL p…5.5