[Bug 1115590] VUL-1: CVE-2018-19128: libav: heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that can cause a denial-of-service via a crafted avi file