GPAC through 2.2.1 has a use-after-free vulnerability in the function gfbifsflushcommandlist in bifs/memory_decoder.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41000.json"