CVE-2026-36908

A stack overflow in the AP4Array::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

PT-2026-52976

Name of the Vulnerable Software and Affected Versions Bento4 versions prior to 1.8.9 Description A stack overflow occurs in the AP4 Array::EnsureCapacity component. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially crafted MP4 file. Recommendations Update t...

PT-2022-11340

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-638 Description The issue is related to an allocator running out of memory in the AP4 Array::EnsureCapacity function, located in Ap4Array.h:172. This can cause a denial of service DOS, as demonstrated by GPAC...