https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8537.htmlhttps://patchthecve.com/cve/CVE-2025-8537.htmlWed, 17 Jun 2026 10:07:10 +0000LOW 3.7: A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack remhttps://patchthecve.com/cve/CVE-2024-57598.htmlhttps://patchthecve.com/cve/CVE-2024-57598.htmlSun, 05 Jul 2026 01:21:21 +0000MEDIUM 6.5: A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability.https://patchthecve.com/cve/CVE-2025-0870.htmlhttps://patchthecve.com/cve/CVE-2025-0870.htmlWed, 17 Jun 2026 08:27:17 +0000MEDIUM 5.6: A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4_DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of anhttps://patchthecve.com/cve/CVE-2025-0753.htmlhttps://patchthecve.com/cve/CVE-2025-0753.htmlWed, 17 Jun 2026 08:27:05 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-0751.htmlhttps://patchthecve.com/cve/CVE-2025-0751.htmlWed, 17 Jun 2026 08:27:05 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to t