The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service.
{ "urgency": "not yet assigned" }