system
Describe <CVE-2017-9995>.
user
What is <CVE-2017-9995>?
assistant
libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file..