https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8537.htmlhttps://patchthecve.com/cve/CVE-2025-8537.htmlWed, 17 Jun 2026 10:07:10 +0000LOW 3.7: A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack remhttps://patchthecve.com/cve/CVE-2024-57598.htmlhttps://patchthecve.com/cve/CVE-2024-57598.htmlSun, 05 Jul 2026 01:21:21 +0000MEDIUM 6.5: A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability.https://patchthecve.com/cve/CVE-2025-0870.htmlhttps://patchthecve.com/cve/CVE-2025-0870.htmlWed, 17 Jun 2026 08:27:17 +0000MEDIUM 5.6: A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4_DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of anhttps://patchthecve.com/cve/CVE-2025-0753.htmlhttps://patchthecve.com/cve/CVE-2025-0753.htmlWed, 17 Jun 2026 08:27:05 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-0751.htmlhttps://patchthecve.com/cve/CVE-2025-0751.htmlWed, 17 Jun 2026 08:27:05 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to thttps://patchthecve.com/cve/CVE-2024-30809.htmlhttps://patchthecve.com/cve/CVE-2024-30809.htmlWed, 17 Jun 2026 07:27:24 +0000HIGH 7.5: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::GetOffset() const, leading to a Denial of Service (DoS), as demonstrated by mp42ts.https://patchthecve.com/cve/CVE-2024-30808.htmlhttps://patchthecve.com/cve/CVE-2024-30808.htmlWed, 17 Jun 2026 07:27:24 +0000LOW 2.7: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_SubStream::~AP4_SubStream at Ap4ByteStream.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.https://patchthecve.com/cve/CVE-2024-30807.htmlhttps://patchthecve.com/cve/CVE-2024-30807.htmlWed, 17 Jun 2026 07:27:24 +0000HIGH 7.5: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.https://patchthecve.com/cve/CVE-2024-30806.htmlhttps://patchthecve.com/cve/CVE-2024-30806.htmlWed, 17 Jun 2026 07:27:24 +0000MEDIUM 6.5: An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42aac.https://patchthecve.com/cve/CVE-2024-31005.htmlhttps://patchthecve.com/cve/CVE-2024-31005.htmlWed, 17 Jun 2026 07:27:40 +0000HIGH 8.1: An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragmenthttps://patchthecve.com/cve/CVE-2024-31004.htmlhttps://patchthecve.com/cve/CVE-2024-31004.htmlWed, 17 Jun 2026 07:27:40 +0000CRITICAL 9.8: An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAtom,mp4fragment.https://patchthecve.com/cve/CVE-2024-31003.htmlhttps://patchthecve.com/cve/CVE-2024-31003.htmlWed, 17 Jun 2026 07:27:39 +0000HIGH 8.8: Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial at Ap4ByteStream.cpp.https://patchthecve.com/cve/CVE-2024-31002.htmlhttps://patchthecve.com/cve/CVE-2024-31002.htmlWed, 17 Jun 2026 07:27:39 +0000CRITICAL 9.8: Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap4Utils.cpp component.https://patchthecve.com/cve/CVE-2024-24155.htmlhttps://patchthecve.com/cve/CVE-2024-24155.htmlWed, 17 Jun 2026 07:14:11 +0000MEDIUM 6.5: Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mp4 file.https://patchthecve.com/cve/CVE-2024-25454.htmlhttps://patchthecve.com/cve/CVE-2024-25454.htmlWed, 17 Jun 2026 07:16:03 +0000MEDIUM 5.5: Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_DescriptorFinder::Test() function.https://patchthecve.com/cve/CVE-2024-25453.htmlhttps://patchthecve.com/cve/CVE-2024-25453.htmlWed, 17 Jun 2026 07:16:03 +0000MEDIUM 5.5: Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAtom::GetSampleSize() function.https://patchthecve.com/cve/CVE-2024-25452.htmlhttps://patchthecve.com/cve/CVE-2024-25452.htmlWed, 17 Jun 2026 07:16:03 +0000MEDIUM 5.5: Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom() function.https://patchthecve.com/cve/CVE-2024-25451.htmlhttps://patchthecve.com/cve/CVE-2024-25451.htmlWed, 17 Jun 2026 07:16:03 +0000MEDIUM 6.5: Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_DataBuffer::ReallocateBuffer() function.