GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the def_parent_box_new function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files.