A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,Referenceshttps://github.com/gpac/gpac/issues/1838https://www.debian.org/security/2023/dsa-5411