CVE-2026-36908: Stack-based Buffer Overflow

A stack overflow in the AP4Array ::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2022-41845: Allocation of Resources Without Limits or Throttling

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4Array ::EnsureCapacity in Core/Ap4Array.h...

CVE-2021-40941: Allocation of Resources Without Limits or Throttling

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4Array ::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service DOS...

Bento4 Excessive Memory Allocation Attempt Vulnerability (CNVD-2019-28481)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation attempt vulnerability exists in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627, which can be exploited to cause an out-of-memory condition via specially crafted MP4 input...