CVE-2017-9995

FFmpeg 3.3 before 3.3.1 contains a heap-based buffer overflow in libavcodec/scpr.c due to improper validation of height and width in crafted files, enabling a remote attacker to cause denial of service (application crash). Affected component: FFmpeg’s libavcodec/scpr.c; root cause: inadequate bou...