Debian Linux Security Advisory 4143-1 - Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.
ae578097448b181069464aaacea1cd098476dd78446feaa86438e6cee725f8df
Debian Linux Security Advisory 4141-1 - Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opened.
b826db7da5817ae73fb9dde98c2c4eda2c21050b603201470ace614bc4d7d88e