CVE-2022-35165: Axiosys BENTO4

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input.

Affected products

• Axiosys BENTO4: version 1.6.0-639 only

Published 2022-08-18. Last modified 2026-06-17.