Bento4 v1.6.0-639 exists to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts.
axiosys bento4 1.6.0-639