Debian 8 Jessie: DLA-2072-1 Critical: gpac Denial Of Service Threats

AVC_DuplicateConfig() at isomedia/avc_ext.c allows remote
attackers to cause a denial of service (NULL pointer dereference
and application crash) via a crafted file.

CVE-2018-21016

audio_sample_entry_AddBox() at isomedia/box_code_base.c allows
remote attackers to cause a denial of service (heap-based buffer
over-read and application crash) via a crafted file.

CVE-2019-13618

isomedia/isom_read.c in libgpac.a has a heap-based buffer
over-read, as demonstrated by a crash in gf_m2ts_sync in
media_tools/mpegts.c.

CVE-2019-20161

heap-based buffer overflow in the function
ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.

CVE-2019-20162

heap-based buffer overflow in the function gf_isom_box_parse_ex()
in isomedia/box_funcs.c.

CVE-2019-20163

NULL pointer dereference in the function gf_odf_avc_cfg_write_bs()
in odf/descriptors.c.

CVE-2019-20165

NULL pointer dereference in the function ilst_item_Read() in
isomedia/box_code_apple.c.

CVE-2019-20170