A specially crafted unicode string in libebml master branch can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potentially be used for information leaks. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1514
