CVE-2021-45292

GPAC 1.0.1 has a vulnerability in gf_isom_hint_rtp_read that can cause a denial of service through a crafted MP4Box file, due to an invalid memory address dereference. This CVE is CVE-2021-45292. Remediation is to upgrade to a fixed GPAC release (e.g., Debian’s 1.0.1+dfsg1-4+deb11u2).