gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmpha_description in gpac/MP4Box.