Approved changes feed: RSS · Atom

cpe:2.3:a:axiosys:bento4:1.5.1.0:*:*:*:*:*:*:*

part: a version: 1.5.1.0 update: *

VendorAxiosys (7b46f492-cfb7-52ac-986c-f9d8ddb07119)
ProductBento4 (472e8b33-1ec2-5fdf-8d83-feea7374b7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/axiomatic-systems/bento4 purl2cpe 2026-06-01 10:12:22.693658
pkg:npm/bento4 purl2cpe 2026-06-01 10:12:22.693659
pkg:sourceforge/bento4 purl2cpe 2026-06-01 10:12:22.693661

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21066 vulnerable 2026-06-08 05:22:30.687581 Details available
An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42aac.
Published: 2021-08-13T20:38:40.000Z
Updated: 2024-08-04T14:22:25.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20092 vulnerable 2026-06-08 05:13:30.478569 Details available
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp.
Published: 2019-12-30T03:48:06.000Z
Updated: 2024-08-05T02:32:10.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20091 vulnerable 2026-06-08 05:13:30.478260 Details available
An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp.
Published: 2019-12-30T03:48:14.000Z
Updated: 2024-08-05T02:32:10.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20090 vulnerable 2026-06-08 05:13:30.477866 Details available
An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp.
Published: 2019-12-30T03:48:23.000Z
Updated: 2024-08-05T02:32:10.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17530 vulnerable 2026-06-08 05:13:10.611578 Details available
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4_Atom::Inspect in Core/Ap4Atom.cpp.
Published: 2019-10-12T19:21:29.000Z
Updated: 2024-08-05T01:40:15.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17529 vulnerable 2026-06-08 05:13:10.611180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17528 vulnerable 2026-06-08 05:13:10.610862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17454 vulnerable 2026-06-08 05:13:10.525548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17453 vulnerable 2026-06-08 05:13:10.525226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17452 vulnerable 2026-06-08 05:13:10.524708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15050 vulnerable 2026-06-08 05:12:56.590980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15049 vulnerable 2026-06-08 05:12:56.590695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15048 vulnerable 2026-06-08 05:12:56.590275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15047 vulnerable 2026-06-08 05:12:56.589894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13238 vulnerable 2026-06-08 05:12:42.023495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5253 vulnerable 2026-06-08 05:11:50.520774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10790 vulnerable 2026-06-08 05:10:37.102866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.