{"schema_version":1,"title":"Axiomatic Systems Bento4 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in Axiomatic Systems Bento4: 2 in the last 7 days and 2 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88377, was published on 24 September 2026.","url":"https://junglewise.ai/threats/technologies/bento4","json_url":"https://junglewise.ai/threats/technologies/bento4.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/bento4","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":4,"critical":0,"exploited":0,"last_7_days":2,"last_30_days":2,"last_90_days":2,"last_365_days":4},"latest":[{"cve":"CVE-2026-88377","epss":0.0015,"slug":"cve-2026-88377-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-the","title":"Bento4 integer underflow in MP4 atom parsing","severity":"info","exploited":false,"published_at":"2026-09-24T17:17:07.433+00:00","url":"https://junglewise.ai/threats/cve-2026-88377-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-the"},{"cve":"CVE-2026-88376","cvss":7.5,"epss":0.0039,"slug":"cve-2026-88376-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-ap4","title":"Bento4 integer underflow in avcC/hvcC atom parsing","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:07.313+00:00","url":"https://junglewise.ai/threats/cve-2026-88376-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-ap4"},{"cve":"CVE-2026-36908","cvss":5.5,"slug":"cve-2026-36908-axiomatic-systems-bento4-stack-overflow-in-ap4-trunatom","title":"axiomatic-systems Bento4 stack overflow in AP4_TrunAtom","severity":"info","exploited":false,"published_at":"2026-06-26T22:16:31.747+00:00","url":"https://junglewise.ai/threats/cve-2026-36908-axiomatic-systems-bento4-stack-overflow-in-ap4-trunatom"},{"cve":"CVE-2026-36907","cvss":5.5,"slug":"cve-2026-36907-axiomatic-systems-bento4-stack-overflow-in-ap4-stsdatom","title":"Axiomatic-systems Bento4 stack overflow in AP4_StsdAtom","severity":"info","exploited":false,"published_at":"2026-06-26T22:16:31.637+00:00","url":"https://junglewise.ai/threats/cve-2026-36907-axiomatic-systems-bento4-stack-overflow-in-ap4-stsdatom"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":2}],"related":[],"technology":{"hub":true,"name":"Axiomatic Systems Bento4","slug":"bento4","vendor":{"name":"Axiomatic Systems","slug":"axiomatic-systems","url":"https://junglewise.ai/threats/vendors/axiomatic-systems"},"aliases":[],"category":"library","homepage":"https://www.bento4.com/","repo_url":"https://github.com/axiomatic-systems/Bento4","description":"A C++ library and command-line tools for parsing, creating, and editing MP4 and DASH multimedia files.","url":"https://junglewise.ai/threats/technologies/bento4"},"most_severe":[{"cve":"CVE-2026-88376","cvss":7.5,"epss":0.0039,"slug":"cve-2026-88376-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-ap4","title":"Bento4 integer underflow in avcC/hvcC atom parsing","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:07.313+00:00","url":"https://junglewise.ai/threats/cve-2026-88376-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-ap4"},{"cve":"CVE-2026-36908","cvss":5.5,"slug":"cve-2026-36908-axiomatic-systems-bento4-stack-overflow-in-ap4-trunatom","title":"axiomatic-systems Bento4 stack overflow in AP4_TrunAtom","severity":"info","exploited":false,"published_at":"2026-06-26T22:16:31.747+00:00","url":"https://junglewise.ai/threats/cve-2026-36908-axiomatic-systems-bento4-stack-overflow-in-ap4-trunatom"},{"cve":"CVE-2026-36907","cvss":5.5,"slug":"cve-2026-36907-axiomatic-systems-bento4-stack-overflow-in-ap4-stsdatom","title":"Axiomatic-systems Bento4 stack overflow in AP4_StsdAtom","severity":"info","exploited":false,"published_at":"2026-06-26T22:16:31.637+00:00","url":"https://junglewise.ai/threats/cve-2026-36907-axiomatic-systems-bento4-stack-overflow-in-ap4-stsdatom"},{"cve":"CVE-2026-88377","epss":0.0015,"slug":"cve-2026-88377-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-the","title":"Bento4 integer underflow in MP4 atom parsing","severity":"info","exploited":false,"published_at":"2026-09-24T17:17:07.433+00:00","url":"https://junglewise.ai/threats/cve-2026-88377-bento4-1-6-0-0-contains-an-integer-underflow-vulnerability-in-the"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}