Reading outside allocated memory on JPEG exif headers parsing. CPU exhaustion because of predictable hash collisions for form data.
vulners.com/securityvulns/securityvulns:doc:27500
vulners.com/securityvulns/securityvulns:doc:27501