The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7164.json"