GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the ilst_item_box_dump function in box_dump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service.