CVE-2016-4629 (mac_os_x)
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted xStride and yStride values in an EXR image.
Source: CVE-2016-4629 (mac_os_x)