Bento4 v1.6.0-639 exists to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.
axiosys bento4 1.6.0-639