PatchTheCVEgopro vulnerabilities
Recent CVEs affecting gopro products. 18 tracked.
gopro has 18 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-10-19. Highest priority: CVE-2018-13011 (score 64/100).
- CVE-2020-16161 HIGH 7.5 DOWNGRADE GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData()
- CVE-2020-16160 HIGH 7.5 DOWNGRADE GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress()
- CVE-2020-16159 CRITICAL 9.1 DOWNGRADE GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData()
- CVE-2020-16158 HIGH 8.8 UPGRADE GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE()
- CVE-2019-20089 HIGH 7.8 DOWNGRADE GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size
- CVE-2019-20088 HIGH 7.8 DOWNGRADE GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
- CVE-2019-20087 HIGH 8.8 DOWNGRADE GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "match
- CVE-2019-20086 HIGH 8.8 DOWNGRADE GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
- CVE-2019-15148 MEDIUM 6.5 DOWNGRADE GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
- CVE-2019-15147 MEDIUM 6.5 DOWNGRADE GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
- CVE-2019-15146 MEDIUM 6.5 DOWNGRADE GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
- CVE-2018-18699 HIGH 8.8 DOWNGRADE An issue was discovered in GoPro gpmf-parser 1.2.1
- CVE-2018-18190 MEDIUM 5.5 UPGRADE An issue was discovered in GoPro gpmf-parser before 1.2.1
- CVE-2018-13026 CRITICAL 9.8 DOWNGRADE An issue was discovered in gpmf-parser 1.1.2
- CVE-2018-13011 CRITICAL 9.8 DOWNGRADE An issue was discovered in gpmf-parser 1.1.2
- CVE-2018-13009 CRITICAL 9.8 DOWNGRADE An issue was discovered in gpmf-parser 1.1.2
- CVE-2018-13008 CRITICAL 9.8 DOWNGRADE An issue was discovered in gpmf-parser 1.1.2
- CVE-2018-13007 CRITICAL 9.8 DOWNGRADE An issue was discovered in gpmf-parser 1.1.2
FAQ
How do I fix gopro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gopro being exploited right now?
None of the tracked gopro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gopro CVE should I patch first?
CVE-2018-13011 currently ranks highest (64/100): An issue was discovered in gpmf-parser 1.1.2.