CVE-2024-31003: Axiosys BENTO4

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial at Ap4ByteStream.cpp.

Affected products

• Axiosys BENTO4: version 1.6.0-641 only

Published 2024-04-02. Last modified 2026-06-17.