CVE-2019-17529: Axiosys BENTO4

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp when called from AP4_Atom::Inspect in Core/Ap4Atom.cpp.

Affected products

• Axiosys BENTO4: version 1.5.1.0 only

Published 2019-10-12. Last modified 2026-06-17.