Bento4 v1.6.0-640 exists to contain a NULL pointer dereference via the AP4_StszAtom::GetSampleSize() function.
axiosys bento4 1.6.0-640