CVE-2024-31004: Axiosys BENTO4

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAtom,mp4fragment.

Affected products

• Axiosys BENTO4: version 1.6.0-641 only

Published 2024-04-02. Last modified 2026-06-17.