A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c which allows attackers to cause a denial of service even code execution and escalation of privileges.