In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20760.json"