CVE-2019-13238: Axiosys BENTO4

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL pointer.

Affected products

• Axiosys BENTO4: version 1.5.1.0 only

Published 2019-07-04. Last modified 2026-06-17.