The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
null dereference in MP4Box MergeTrack
This is a GitHub Issue
repo:gpac
owner:gpac
Title : null dereference in MP4Box MergeTrack
Issue date:

--- start body ---
None
--- end body ---

A null dereference vulnerability in the MP4Box MergeTrack function could lead to application crashes or undefined behavior when handling certain MP4 files. This can be exploited by attackers to cause Denial of Service (DoS) conditions.