Noki

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to 2.5-DEV **Description** A double free occurs in the MP4Box component within the `gf isom nalu sample rewrite()` function located in the `src/isomedia/avc ext.c` file. This issue is triggered by the manipulation of the `nalu out bs` argument and can be exploited on a local host. A double free is a memory corruption issue that occurs when an application attempts to free the same memory location twice. **Recommendations** Deploy patch f29f955f2a3b5e8e507caad3e52319f961bf37bf for versions prior to 2.5-DEV.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to b40ce70f5 **Description** A heap-based buffer overflow occurs in the MP4Box component within the `sgpd del entry()` function located in the `src/isomedia/box code base.c` file. This issue is triggered by the manipulation of the `data` argument and requires local access to be exploited. **Recommendations** Apply patch f29f955f2a3b5e8e507caad3e52319f961bf37bf to resolve the issue.