Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results
in a floating point exception.
Yuriy M. Kaminskiy discovered that drawing using coordinates from an
untrusted source could lead to an out-of-bound memory read, which in
turn could result in an application crash.
Jakub Wilk discovered that a malformed image could lead to an
out-of-bound read in the GIF loader, which may result in an application
crash or information leak.
Yuriy M. Kaminskiy discovered an integer overflow that could lead to an
insufficient heap allocation and out-of-bound memory write.
article.gmane.org/gmane.comp.security.oss.general/19276
article.gmane.org/gmane.comp.window-managers.enlightenment.devel/64373
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5326
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3993
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3994
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4021