Bento4 v1.6.0-639 exists to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.
axiosys bento4 1.6.0-639