Stack Overflow Vulnerability in Bento4 by Axiomatic Systems
CVE-2026-36908

5.5MEDIUM

Key Information:

Vendor: Axiomatic Systems
Status: Bento4
Vendor: CVE Published:; 26 June 2026

🔔 Create Axiomatic Systems Vulnerability Alert

What is CVE-2026-36908?

A stack overflow vulnerability exists in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of Bento4 by Axiomatic Systems prior to version 1.8.9. This flaw can be exploited by attackers through the use of a specially crafted MP4 file, potentially leading to a Denial of Service condition.

References

https://github.com/axiomatic-systems/Bento4/issues/842

https://github.com/Aleksoid1978/MPC-BE/issues/1005

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 26, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-36908 Data

JSON