A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption (CVE-2017-5838).