Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [x] I looked for a similar issue and couldn't find any.
- [x] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [x] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/
**Describe the bug**
There is a  bug  （out of memory） in mp4Box-GPAC version 2.0-revUNKNOWN_REV , can be triggered via MP4Box+ ASan
**Step to reproduce**
1) compile gpac-2.0.0

`./configure  --enable-sanitizer && make -j$(nproc)`

2) get version
```
fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -version
MP4Box - GPAC version 2.0-revUNKNOWN_REV
(c) 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io

Please cite our work in your research:
	GPAC Filters: https://doi.org/10.1145/3339825.3394929
	GPAC: https://doi.org/10.1145/1291233.1291452

GPAC Configuration: --enable-sanitizer
Features: GPAC_CONFIG_LINUX GPAC_64_BITS GPAC_HAS_IPV6 GPAC_HAS_SOCK_UN GPAC_MINIMAL_ODF GPAC_HAS_QJS GPAC_HAS_LINUX_DVB  GPAC_DISABLE_3D 

```
3)run poc in terminal:
`fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -diso ../../../poc_oom
`
**Sanitizer output**


```
fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -diso ../../../poc_oom
[iso file] Unknown top-level box type dchm
[iso file] Unknown top-level box type 000000

=================================================================
==10079==ERROR: AddressSanitizer: allocator is out of memory trying to allocate 0x3fffce000 bytes
    #0 0x7ff3b5c10808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7ff3b28f2f94 in csgp_box_read isomedia/box_code_base.c:12657
    #2 0x7ff3b294454b in gf_isom_box_read isomedia/box_funcs.c:1832
    #3 0x7ff3b294454b in gf_isom_box_parse_ex isomedia/box_funcs.c:264
    #4 0x7ff3b29458c2 in gf_isom_parse_root_box isomedia/box_funcs.c:38
    #5 0x7ff3b296eb44 in gf_isom_parse_movie_boxes_internal isomedia/isom_intern.c:373
    #6 0x7ff3b2974c1f in gf_isom_parse_movie_boxes isomedia/isom_intern.c:852
    #7 0x7ff3b2974c1f in gf_isom_open_file isomedia/isom_intern.c:972
    #8 0x5580a802520d in mp4boxMain /home/fuzz/fuzzing_gpac/gpac-2.0.0/applications/mp4box/main.c:5968
    #9 0x7ff3aff58082 in __libc_start_main ../csu/libc-start.c:308

==10079==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: out-of-memory ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144 in __interceptor_malloc
==10079==ABORTING
```

**Testing Enviorments:**
```
ubuntu20.04 lts
gcc 9.4.0
MP4Box - GPAC version 2.0-revUNKNOWN_REV
```

POC:

[poc_oom.zip](https://github.com/gpac/gpac/files/9024741/poc_oom.zip)

ps: 
it also crashed  under the newest gpac version(MP4Box - GPAC version 2.1-DEV-revUNKNOWN-master),,so the bug was in the version prior to GPAC version 2.1-DEV-revUNKNOWN-master.


allocator is out of memory(OOM in mp4Box-GPAC version 2.0-revUNKNOWN_REV)
This is a GitHub Issue
repo:gpac
owner:gpac
Title : allocator is out of memory(OOM in mp4Box-GPAC version 2.0-revUNKNOWN_REV)
Issue date:

--- start body ---
Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [x] I looked for a similar issue and couldn't find any.
- [x] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [x] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/
**Describe the bug**
There is a  bug  （out of memory） in mp4Box-GPAC version 2.0-revUNKNOWN_REV , can be triggered via MP4Box+ ASan
**Step to reproduce**
1) compile gpac-2.0.0

`./configure  --enable-sanitizer && make -j$(nproc)`

2) get version
```
fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -version
MP4Box - GPAC version 2.0-revUNKNOWN_REV
(c) 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io

Please cite our work in your research:
	GPAC Filters: https://doi.org/10.1145/3339825.3394929
	GPAC: https://doi.org/10.1145/1291233.1291452

GPAC Configuration: --enable-sanitizer
Features: GPAC_CONFIG_LINUX GPAC_64_BITS GPAC_HAS_IPV6 GPAC_HAS_SOCK_UN GPAC_MINIMAL_ODF GPAC_HAS_QJS GPAC_HAS_LINUX_DVB  GPAC_DISABLE_3D 

```
3)run poc in terminal:
`fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -diso ../../../poc_oom
`
**Sanitizer output**


```
fuzz@ubuntu:~/fuzzing_gpac/gpac-2.0.0/bin/gcc$ ./MP4Box -diso ../../../poc_oom
[iso file] Unknown top-level box type dchm
[iso file] Unknown top-level box type 000000

=================================================================
==10079==ERROR: AddressSanitizer: allocator is out of memory trying to allocate 0x3fffce000 bytes
    #0 0x7ff3b5c10808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7ff3b28f2f94 in csgp_box_read isomedia/box_code_base.c:12657
    #2 0x7ff3b294454b in gf_isom_box_read isomedia/box_funcs.c:1832
    #3 0x7ff3b294454b in gf_isom_box_parse_ex isomedia/box_funcs.c:264
    #4 0x7ff3b29458c2 in gf_isom_parse_root_box isomedia/box_funcs.c:38
    #5 0x7ff3b296eb44 in gf_isom_parse_movie_boxes_internal isomedia/isom_intern.c:373
    #6 0x7ff3b2974c1f in gf_isom_parse_movie_boxes isomedia/isom_intern.c:852
    #7 0x7ff3b2974c1f in gf_isom_open_file isomedia/isom_intern.c:972
    #8 0x5580a802520d in mp4boxMain /home/fuzz/fuzzing_gpac/gpac-2.0.0/applications/mp4box/main.c:5968
    #9 0x7ff3aff58082 in __libc_start_main ../csu/libc-start.c:308

==10079==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: out-of-memory ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144 in __interceptor_malloc
==10079==ABORTING
```

**Testing Enviorments:**
```
ubuntu20.04 lts
gcc 9.4.0
MP4Box - GPAC version 2.0-revUNKNOWN_REV
```

POC:

[poc_oom.zip](https://github.com/gpac/gpac/files/9024741/poc_oom.zip)

ps: 
it also crashed  under the newest gpac version(MP4Box - GPAC version 2.1-DEV-revUNKNOWN-master),,so the bug was in the version prior to GPAC version 2.1-DEV-revUNKNOWN-master.


--- end body ---

The issue indicates a potential Denial of Service (DoS) vulnerability in GPAC's MP4Box due to an out-of-memory condition triggered by a specially crafted MP4 file. The AddressSanitizer output shows that the allocator fails to allocate a large amount of memory, which can lead to application crashes.