GCVE - cpe:2.3:a:axiosys:bento4:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:axiosys:bento4:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Axiosys (`7b46f492-cfb7-52ac-986c-f9d8ddb07119`)
Product	Bento4 (`472e8b33-1ec2-5fdf-8d83-feea7374b7ea`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/axiomatic-systems/bento4`	purl2cpe	2026-06-01 10:12:22.693509
`pkg:npm/bento4`	purl2cpe	2026-06-01 10:12:22.693510
`pkg:sourceforge/bento4`	purl2cpe	2026-06-01 10:12:22.693512

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-25452`	vulnerable	2026-06-08 06:31:22.966161	Details available Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom() function. Published: 2024-02-09T00:00:00.000Z Updated: 2024-08-26T19:02:28.570Z Open on db.gcve.eu Reference links https://github.com/axiomatic-systems/Bento4/issues/873	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3807`	vulnerable	2026-06-08 05:48:22.367471	Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption MEDIUM (4.3) A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660. Published: 2022-11-01T00:00:00.000Z Updated: 2025-04-15T13:18:59.281Z Open on db.gcve.eu Reference links https://github.com/axiomatic-systems/Bento4/issues/803 https://github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip https://vuldb.com/?id.212660	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23332`	vulnerable	2026-06-08 05:22:31.882878	Details available A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByteStream.cpp of Bento4 version 06c39d9. This issue can lead to a denial of service (DOS). Published: 2021-08-17T21:27:47.000Z Updated: 2024-08-04T14:58:14.800Z Open on db.gcve.eu Reference links https://cwe.mitre.org/data/definitions/122.html https://github.com/axiomatic-systems/Bento4/issues/510	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23331`	vulnerable	2026-06-08 05:22:31.882361	Details available An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS). Published: 2021-08-17T21:27:47.000Z Updated: 2024-08-04T14:58:14.733Z Open on db.gcve.eu Reference links https://github.com/axiomatic-systems/Bento4/issues/509	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.