CVE-2019-16351

ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.