CVE-2019-20628

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0

Description A Use-After-Free issue can cause a denial of service via a crafted MP4 file. The issue is located in the gf m2ts process pmt function in media tools/mpegts.c, as demonstrated by MP4Box.

Recommendations For versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted MP4 files that may trigger the denial of service.