Comment 1 for bug 1919305

Thanks for taking the time to report this bug and helping to make Ubuntu better. If you haven't already, could you please apply for a CVE for the issue?

Given the public github bug, can I make this bug report public?

Since the package referred to in this bug is in universe, it is community maintained. If you are able, I suggest posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

It looks like this has been fixed upstream: https://github.com/gpac/gpac/commit/c4a5109dad73abe25ad12d8d529a728ae98d78ca