Bento4 v1.6.0-639 exists to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
axiosys bento4 1.6.0-639