In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13618.json"