CVE-2025-25944: Axiosys BENTO4

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file.

Affected products

• Axiosys BENTO4: version 1.6.0-641 only

Published 2025-02-19. Last modified 2026-06-17.