Approved changes feed: RSS · Atom

cpe:2.3:a:axiosys:bento4:1.5.1-627:*:*:*:*:*:*:*

part: a version: 1.5.1-627 update: *

VendorAxiosys (7b46f492-cfb7-52ac-986c-f9d8ddb07119)
ProductBento4 (472e8b33-1ec2-5fdf-8d83-feea7374b7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/axiomatic-systems/bento4 purl2cpe 2026-06-01 10:12:22.693683
pkg:npm/bento4 purl2cpe 2026-06-01 10:12:22.693684
pkg:sourceforge/bento4 purl2cpe 2026-06-01 10:12:22.693685

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7699 vulnerable 2026-06-08 05:14:14.667271 Details available
A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service.
Published: 2019-02-10T22:00:00.000Z
Updated: 2024-08-04T20:54:28.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7698 vulnerable 2026-06-08 05:14:14.666990 Details available
An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095.
Published: 2019-02-10T22:00:00.000Z
Updated: 2024-08-04T20:54:28.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7697 vulnerable 2026-06-08 05:14:14.666690 Details available
An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42hls.
Published: 2019-02-10T22:00:00.000Z
Updated: 2024-08-04T20:54:28.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6132 vulnerable 2026-06-08 05:14:08.802070 Details available
An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4_EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac.
Published: 2019-01-11T05:00:00.000Z
Updated: 2024-09-17T04:19:21.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13959 vulnerable 2026-06-08 05:12:52.874683 Details available
In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186.
Published: 2019-07-18T18:51:44.000Z
Updated: 2024-08-05T00:05:44.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20659 vulnerable 2026-06-08 05:11:27.681899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20502 vulnerable 2026-06-08 05:11:27.437580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20409 vulnerable 2026-06-08 05:11:27.211311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20408 vulnerable 2026-06-08 05:11:27.211010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20407 vulnerable 2026-06-08 05:11:27.210725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20186 vulnerable 2026-06-08 05:11:26.821206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20095 vulnerable 2026-06-08 05:11:26.649474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.