Approved changes feed: RSS · Atom

cpe:2.3:a:axiosys:bento4:1.6.0-641:*:*:*:*:*:*:*

part: a version: 1.6.0-641 update: *

VendorAxiosys (7b46f492-cfb7-52ac-986c-f9d8ddb07119)
ProductBento4 (472e8b33-1ec2-5fdf-8d83-feea7374b7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/axiomatic-systems/bento4 purl2cpe 2026-06-01 10:12:22.693739
pkg:npm/bento4 purl2cpe 2026-06-01 10:12:22.693741
pkg:sourceforge/bento4 purl2cpe 2026-06-01 10:12:22.693742

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25947 vulnerable 2026-06-08 07:12:51.402746 Details available
An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input file.
Published: 2025-02-19T00:00:00.000Z
Updated: 2025-02-20T14:32:36.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25946 vulnerable 2026-06-08 07:12:51.402399 Details available
An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory leak via Ap4Marlin.cpp and Ap4Processor.cpp, specifically in AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process, during the execution of mp4encrypt with a specially crafted MP4 input file.
Published: 2025-02-19T00:00:00.000Z
Updated: 2025-02-20T14:34:38.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25945 vulnerable 2026-06-08 07:12:51.401904 Details available
An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp.
Published: 2025-02-19T00:00:00.000Z
Updated: 2025-02-20T14:37:48.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25944 vulnerable 2026-06-08 07:12:51.401527 Details available
Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file.
Published: 2025-02-19T00:00:00.000Z
Updated: 2025-02-20T14:41:31.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25943 vulnerable 2026-06-08 07:12:51.401248 Details available
Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.
Published: 2025-02-19T00:00:00.000Z
Updated: 2025-02-20T14:44:53.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25942 vulnerable 2026-06-08 07:12:51.400894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57598 vulnerable 2026-06-08 06:56:13.614461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31005 vulnerable 2026-06-08 06:35:30.789302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31004 vulnerable 2026-06-08 06:35:30.788875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31003 vulnerable 2026-06-08 06:35:30.788443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31002 vulnerable 2026-06-08 06:35:30.787961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30809 vulnerable 2026-06-08 06:35:30.675177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30808 vulnerable 2026-06-08 06:35:30.674800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30807 vulnerable 2026-06-08 06:35:30.674397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30806 vulnerable 2026-06-08 06:35:30.673004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.