CVE-2009-1532
malformed inputs cause accesses of uninitialized or previously-deleted objects, leading to memory corruption
CVE-2009-0269
chain: -1 value from a function call was intended to indicate an error, but is used as an array index instead.