CVE-2020-23334: Axiosys BENTO4

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A WRITE memory access in the AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault.

Affected products

• Axiosys BENTO4: before 1.6.0-635 (fixed in 1.6.0-635)

Published 2021-08-17. Last modified 2026-06-17.