Approved changes feed: RSS · Atom

cpe:2.3:a:axiosys:bento4:1.5.1-628:*:*:*:*:*:*:*

part: a version: 1.5.1-628 update: *

VendorAxiosys (7b46f492-cfb7-52ac-986c-f9d8ddb07119)
ProductBento4 (472e8b33-1ec2-5fdf-8d83-feea7374b7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/axiomatic-systems/bento4 purl2cpe 2026-06-01 10:12:22.693687
pkg:npm/bento4 purl2cpe 2026-06-01 10:12:22.693688
pkg:sourceforge/bento4 purl2cpe 2026-06-01 10:12:22.693689

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24155 vulnerable 2026-06-08 06:29:41.152738 Details available
Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mp4 file.
Published: 2024-02-28T00:00:00.000Z
Updated: 2024-08-28T15:21:11.008Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19722 vulnerable 2026-06-08 05:20:57.414990 Details available
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).
Published: 2021-07-13T21:33:12.000Z
Updated: 2024-08-04T14:15:28.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19721 vulnerable 2026-06-08 05:20:57.414612 Details available
A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service (DOS).
Published: 2021-07-13T21:33:11.000Z
Updated: 2024-08-04T14:15:28.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19720 vulnerable 2026-06-08 05:20:57.414218 Details available
An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Published: 2021-07-13T21:33:10.000Z
Updated: 2024-08-04T14:15:28.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19719 vulnerable 2026-06-08 05:20:57.413824 Details available
A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).
Published: 2021-07-13T21:33:09.000Z
Updated: 2024-08-04T14:15:28.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19718 vulnerable 2026-06-08 05:20:57.413301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19717 vulnerable 2026-06-08 05:20:57.412895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9544 vulnerable 2026-06-08 05:14:25.688127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8382 vulnerable 2026-06-08 05:14:23.976082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8380 vulnerable 2026-06-08 05:14:23.975123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8378 vulnerable 2026-06-08 05:14:23.971118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6966 vulnerable 2026-06-08 05:14:13.554303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16349 vulnerable 2026-06-08 05:13:08.368333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.