A heap-buffer-overflow vulnerability has been identified in the gpac software within the hevc_ref_pic_lists_modification function. This issue was reported by OSS-Fuzz and involves a write operation that exceeds the allocated heap buffer. The crash occurs during HEVC NAL unit parsing and inspection.