In libavcodec in Libav 9.21, ffh264executerefpic_marking() has a heap-based buffer over-read.
{ "extracted_events": [ { "introduced": "9.21" }, { "last_affected": "9.21" } ], "cpe": "cpe:2.3:a:libav:libav:9.21:*:*:*:*:*:*:*", "source": "CPE_STRING" }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5984.json"