CVE-2021-28300

Name of the Vulnerable Software and Affected Versions: GPAC version 0.5.2

Description: A NULL pointer dereference issue exists in the isomedia/track.c module's MergeTrack() function, allowing attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.

Recommendations: For GPAC version 0.5.2, consider disabling the MergeTrack() function until a patch is available to prevent exploitation. Restrict access to uploading MP4 files to minimize the risk of arbitrary code execution or DoS.