The avi_read_nikon function in libavformat/avidec.c in FFmpeg prior to 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure.
ffmpeg ffmpeg