GPAC Denial of Service Vulnerability (CNVD-2022-66666)

GPAC is a multimedia framework. A denial of service vulnerability exists in versions of GPAC prior to 1.0.1. The vulnerability stems from a loop in the ISOBMFF reader filter isoffin_read.c in versions of GPAC prior to commit that contain an unreachable exit condition (“infinite loop”) vulnerability. An attacker could exploit this vulnerability to launch a denial-of-service attack.