Buffer overflow vulnerability in sniffchannelorder function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).