CVE-2016-2851 (arbitrary code execution)
Versions 4.1.0 and earlier of libotr in 64-bit builds contain an integer
overflow security flaw. This flaw could potentially be exploited by a remote
attacker to cause a heap buffer overflow and subsequently for arbitrary code
to be executed on the user’s machine.