audiosampleentryAddBox() at isomedia/boxcode_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
{ "ubuntu_priority": "medium" }