Priority MEDIUM 49
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03172 · Published 2014-10-07 · No fix listed CWE-78
Priority MEDIUM 49
gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03321 · Published 2014-10-07 · No fix listed CWE-94
Priority MEDIUM 46
An issue was discovered in gpmf-parser 1.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2018-06-29 · No fix listed CWE-125
Priority MEDIUM 46
An issue was discovered in gpmf-parser 1.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2018-06-29 · No fix listed CWE-125
Priority MEDIUM 46
An issue was discovered in gpmf-parser 1.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2018-06-29 · No fix listed CWE-125
Priority MEDIUM 46
An issue was discovered in gpmf-parser 1.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2018-06-29 · No fix listed CWE-125
Priority MEDIUM 45
An issue was discovered in gpmf-parser 1.1.2.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01528 · Published 2018-06-30 · No fix listed CWE-125
Priority MEDIUM 42
GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData().
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01574 · Published 2020-10-19 · No fix listed CWE-125
Priority MEDIUM 42
GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE().
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02024 · Published 2020-10-19 · No fix listed CWE-787
Priority MEDIUM 41
An issue was discovered in GoPro gpmf-parser 1.2.1.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01375 · Published 2018-10-27 · No fix listed CWE-787
Priority MEDIUM 40
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01045 · Published 2019-12-30 · No fix listed CWE-125
Priority MEDIUM 40
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01045 · Published 2019-12-30 · No fix listed CWE-125
Priority LOW 36
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01825 · Published 2020-10-19 · No fix listed CWE-369
Priority LOW 36
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00856 · Published 2019-12-30 · No fix listed CWE-125
Priority LOW 35
GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01309 · Published 2020-10-19 · No fix listed CWE-369
Priority LOW 35
GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00779 · Published 2019-12-30 · No fix listed CWE-125
Priority LOW 31
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01142 · Published 2019-08-18 · No fix listed CWE-787
Priority LOW 31
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01142 · Published 2019-08-18 · No fix listed CWE-125
Priority LOW 31
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01142 · Published 2019-08-18 · No fix listed CWE-125
Priority LOW 27
An issue was discovered in GoPro gpmf-parser before 1.2.1.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00879 · Published 2018-10-09 · No fix listed CWE-369