Vulnerabilities in VP9 Video Extensions