GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-64085)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced Content version 1.0.1. The vulnerability stems from unchecked arithmetic. An attacker could exploit the vulnerability via a specially crafted MPEG-4 input in the “stss” decoder to cause a heap buffer overflow, which could lead to memory corruption.