The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-9841.json"