libquicktime version 1.2.4 suffers from an integer overflow vulnerability.
a18ee42207f71292921df36339bb1b46024cc2f78247f2097c3c4680d968095c
libsndfile versions 1.0.25 and below suffer from a heap overflow vulnerability.
6d5a1dca8cb4114df92588327dc9da7e559d30f760ea8e555b84e05ce5fbcbb2