Vulnerabilities in xiph.org software