gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasherconfigurepid function at /src/filters/dasher.c.
gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function.
gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function.
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.