CyberSecBulletin

Axiosys vulnerabilities

We track 4 vulnerabilities in Axiosys products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2025.

4vulnerabilities
1critical
3high
0exploited
8.3average CVSS score

Latest Axiosys vulnerabilities

  • 7.3 High severity

    Bento4: Improper Control of Generation of Code

    CVE-2025-25944Axiosys

    Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file.

  • 7.8 High severity

    Bento4: Improper Control of Generation of Code

    CVE-2025-25943Axiosys

    Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.

  • 8.1 High severity

    bento4: Improper Control of Generation of Code

    CVE-2024-31005AxiosysEPSS 1.22%

    An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment

  • 9.8 Critical severity

    Bento4: Improper Control of Generation of Code

    CVE-2024-31004AxiosysEPSS 1.5%

    An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAtom,mp4fragment.