Skip to content

Vendor

axiosys vulnerabilities

156 published CVES affecting axiosys, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
156
Critical
5
High
54
Medium
96
Low
1
Unscored
0
CISA KEV
0
Atom feed of axiosys alerts

Products

Latest axiosys CVEs

Newest publication first · page 1 of 7

  2. CVE-2025-25942 An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray....

    Published
    MediumCVSS 6.5 EPSS 0.38%

    An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released.

  4. CVE-2025-25946 An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory leak via Ap4Marlin.cpp and Ap4Processor.cpp, specifically in AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process...

    Published
    MediumCVSS 5.5 EPSS 0.21%

    An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory leak via Ap4Marlin.cpp and Ap4Processor.cpp, specifically in AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process, during the execution of mp4encrypt with a specially crafted MP4 input file.

  7. CVE-2025-25944 Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragm...

    Published
    HighCVSS 7.3 EPSS 0.24%

    Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file.

  9. CVE-2025-0870 Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow

    Published
    MediumCVSS 6.3 EPSS 0.58%

    A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4_DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely....

  10. CVE-2025-0753 Axiomatic Bento4 mp42aac ReadPartial heap-based overflow

    Published
    MediumCVSS 6.9 EPSS 0.48%

    A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...

  11. CVE-2025-0751 Axiomatic Bento4 mp42aac ReadBits heap-based overflow

    Published
    MediumCVSS 6.9 EPSS 0.53%

    A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

  20. CVE-2024-24155 Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulne...

    Published
    MediumCVSS 6.5 EPSS 0.64%

    Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mp4 f...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.