GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-82987)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced Content version 1.0.1. The vulnerability stems from unchecked addition operations. An attacker could exploit the vulnerability via specially crafted MPEG-4 input to cause a heap buffer overflow, which could lead to memory corruption.