CVE-2020-23912: Axiosys BENTO4

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service.

Affected products

• Axiosys BENTO4: up to and including 1.6.0-637

Published 2021-04-21. Last modified 2026-06-17.