CVE-2025-0753

A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-119
• CWE-122
• CWE-787

• https://github.com/axiomatic-systems/Bento4/issues/991Exploit, Issue Tracking
• https://github.com/user-attachments/files/18434657/seeds.zipExploit
• https://vuldb.com/?ctiid.293518Permissions Required, VDB Entry
• https://vuldb.com/?id.293518Permissions Required, VDB Entry
• https://vuldb.com/?submit.483326Third Party Advisory

Published

Jan 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0747A Stored Cross-Site Scripting vulnerability has been found i…5.4
• CVE-2025-0748The Homey theme for WordPress is vulnerable to Cross-Site Re…4.3
• CVE-2025-0749The Homey theme for WordPress is vulnerable to authenticatio…8.1
• CVE-2025-0750A vulnerability was found in CRI-O. A path traversal issue i…6.6
• CVE-2025-0751A vulnerability classified as critical has been found in Axi…6.5
• CVE-2025-0752A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. …7.1
• CVE-2025-0754The vulnerability was found in OpenShift Service Mesh 2.6.3 …4.3
• CVE-2025-0755The various bson_append functions in the MongoDB C driver li…7.5
• CVE-2025-0756Overview   The product receives input from an upstrea…9.1
• CVE-2025-0757Overview   The software does not neutralize or incorre…4.4
• CVE-2025-0758Overview  The product specifies permissions for a securit…6.1
• CVE-2025-0759IBM EntireX 11.1 could allow a local user to unintentionally…3.3