PT-2026-52975 · Bento4 · Bento4

CVE-2026-36907

·

Published

2026-06-26

·

Updated

2026-06-29

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Bento4 versions prior to 1.8.9
Description A stack overflow occurs in the AP4 StsdAtom::AP4 StsdAtom component, which can be triggered by a specially crafted MP4 file, leading to a Denial of Service (DoS).
Recommendations Update to version 1.8.9 or later.

Exploit

Fix

DoS

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-36907

Affected Products

Bento4