In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote malicious users to cause a denial of service (infinite loop) via a crafted MP4 file.
axiosys bento4 1.5.1-624