CVE-2016-4646
Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file.
Date published : 2016-07-21
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html