libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11863.json"