GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMFNext in GPMFparser.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15146.json"