Memory corruption on JPEG parsing, function call via user-controlled pointer.
vulners.com/securityvulns/securityvulns:doc:15597
vulners.com/securityvulns/securityvulns:doc:15598
vulners.com/securityvulns/securityvulns:doc:15647