Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Bento4 — Vulnerabilities & Security Advisories 28

All 28 CVE vulnerabilities found in Bento4, with AI-generated Chinese analysis, references, and POCs.

This page details known security vulnerabilities associated with the Bento4 multimedia framework, categorized under general software weakness types. It serves as a centralized resource for tracking security issues affecting this specific open-source tool used for processing multimedia streams. The content on this page aggregates publicly disclosed vulnerabilities spanning from the initial release of the framework through recent updates. It covers a broad spectrum of security flaws, including buffer overflows, input validation errors, and logical flaws that may impact the integrity, availability, or confidentiality of systems utilizing Bento4 libraries. The collection includes issues reported by the vendor, independent security researchers, and automated scanning tools, ensuring a comprehensive view of the threat landscape over time. Users can leverage this information to track a vendor's advisories and understand the evolution of a specific weakness class within the context of multimedia processing. By examining the chronological list of incidents, developers and security analysts can look up a product's vulnerability history to identify recurring patterns or persistent design flaws. This enables teams to assess risk more accurately, prioritize patching efforts, and implement appropriate mitigations for their deployments. The goal is to provide transparent, factual data that supports informed decision-making regarding the secure integration and maintenance of Bento4 in production environments.

Vendor: Axiomatic

CVE ID Title CVSS Severity Published
CVE-2026-5236 Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow CWE-122 5.3 Medium 2026-03-31
CVE-2026-5235 Axiomatic Bento4 MP4 File Ap4Dac4Atom.cpp ReadCache heap-based overflow CWE-122 5.3 Medium 2026-03-31
CVE-2025-8537 Axiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources CWE-770 3.7 Low 2025-08-05
CVE-2025-0870 Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow CWE-122 5.6 Medium 2025-01-30
CVE-2025-0753 Axiomatic Bento4 mp42aac ReadPartial heap-based overflow CWE-122 6.3 Medium 2025-01-27
CVE-2025-0751 Axiomatic Bento4 mp42aac ReadBits heap-based overflow CWE-122 6.3 Medium 2025-01-27
CVE-2022-4584 Axiomatic Bento4 mp42aac heap-based overflow CWE-122 6.3 Medium 2022-12-17
CVE-2022-3974 Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow CWE-119 6.3 Medium 2022-11-13
CVE-2022-3812 Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3817 Axiomatic Bento4 mp4mux memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3816 Axiomatic Bento4 mp4decrypt memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3815 Axiomatic Bento4 mp4decrypt memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3814 Axiomatic Bento4 mp4decrypt memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3813 Axiomatic Bento4 mp4edit memory leak CWE-404 4.3 Medium 2022-11-01
CVE-2022-3810 Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service CWE-404 4.3 Medium 2022-11-01
CVE-2022-3809 Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service CWE-404 4.3 Medium 2022-11-01
CVE-2022-3807 Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption CWE-404 4.3 Medium 2022-11-01
CVE-2022-3785 Axiomatic Bento4 Avcinfo SetDataSize heap-based overflow CWE-119 6.3 Medium 2022-10-31
CVE-2022-3784 Axiomatic Bento4 mp4hls Ap4Mp4AudioInfo.cpp ReadBits heap-based overflow CWE-119 6.3 Medium 2022-10-31
CVE-2022-3662 Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free CWE-119 7.3 High 2022-10-26
CVE-2022-3670 Axiomatic Bento4 mp42hevc WriteSample heap-based overflow CWE-119 7.3 High 2022-10-26
CVE-2022-3669 Axiomatic Bento4 mp4edit Create memory leak CWE-404 5.3 Medium 2022-10-26
CVE-2022-3668 Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak CWE-404 5.3 Medium 2022-10-26
CVE-2022-3667 Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow CWE-119 7.3 High 2022-10-26
CVE-2022-3666 Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free CWE-119 7.3 High 2022-10-26
CVE-2022-3665 Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow CWE-119 7.3 High 2022-10-26
CVE-2022-3664 Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow CWE-119 7.3 High 2022-10-26
CVE-2022-3663 Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference CWE-404 5.3 Medium 2022-10-26

All 28 known CVE vulnerabilities affecting Bento4 with full Chinese analysis, references, and POCs where available.