CVE-2026-88376

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4AvccAtom::Create and AP4HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

EUVD-2026-86318

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4AvccAtom::Create and AP4HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

CVE-2026-88376

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4AvccAtom::Create and AP4HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...

CVE-2026-88376

Bento4 1.6.0.0 is vulnerable to an integer underflow within the AP4_AvccAtom::Create() and AP4_HvccAtom::Create() functions. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a larg...

CVE-2022-3669

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2018-20409

An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls...

CVE-2018-14584

An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read...