Gpac · Gpac · CVE-2021-36584
**Name of the Vulnerable Software and Affected Versions**
GPAC version 1.0.1
**Description**
An issue was discovered in GPAC, where a heap-based buffer overflow occurs in the `gp rtp builder do tx3g` function in `ietf/rtp pck 3gpp.c`, as demonstrated by MP4Box. This can cause a denial of service (DOS).
**Recommendations**
For GPAC version 1.0.1, consider disabling the `gp rtp builder do tx3g` function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.