Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c.
GPAC 2.0.0 misuses a certain Unicode utf8wcslen (renamed gfutf8wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV.
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.