≤ 1.0.11
libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.