CVE-2019-20089

GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.

• CWE-125

• https://github.com/gopro/gpmf-parser/issues/75Exploit, Issue Tracking, Third Party Advisory
• https://github.com/gopro/gpmf-parser/issues/75Exploit, Issue Tracking, Third Party Advisory

Published

Dec 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-2008In createEffect of AudioFlinger.cpp, there is a possible mem…
• CVE-2019-20082ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow …9.8
• CVE-2019-20085TVT NVMS-1000 devices allow GET /.. Directory Traversal7.5
• CVE-2019-20086GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in…8.8
• CVE-2019-20087GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in…8.8
• CVE-2019-20088GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in…7.8
• CVE-2019-2009In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out o…
• CVE-2019-20090An issue was discovered in Bento4 1.5.1.0. There is a use-af…7.8
• CVE-2019-20091An issue was discovered in Bento4 1.5.1.0. There is a NULL p…5.5
• CVE-2019-20092An issue was discovered in Bento4 1.5.1.0. There is a NULL p…5.5
• CVE-2019-20093The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h…5.5
• CVE-2019-20094An issue was discovered in libsixel 1.8.4. There is a heap-b…8.8