Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file. https://nvd.nist.gov/vuln/detail/CVE-2017-15186