An issue was discovered in gpac 0.8.0. The ODReadUTF8String function in odfcode.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-23266.json"