An issue exists in gpac prior to 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
gpac gpac