CVE-2015-6749 (aiff_open buffer overflow) CVE-2014-9638 (division by zero) CVE-2014-9639 (channel integer overflow) Via Jason Unovitch/FreeBSD