CVE-2024-31005: Axiosys BENTO4

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment

Affected products

• Axiosys BENTO4: version 1.6.0-641 only

Published 2024-04-02. Last modified 2026-06-17.