CVE-2022-4584: Axiosys BENTO4

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216170 is the identifier assigned to this vulnerability.

Affected products

• Axiosys BENTO4: up to and including 1.6.0-639

Published 2022-12-17. Last modified 2026-06-17.