Bento4 is an open source C library for reading and writing MP4 files. version 1.6.0-638 of Bento4 suffers from a denial of service vulnerability that stems from insufficient allocator memory and can be exploited by attackers to cause a denial of service.