CVE-2017-13089: wget skip_short_body stack overflow via negative HTTP chunk size (signed strtol + SIZE_MAX read)

CVE-2017-13089: wget skip_short_body() stack overflow via negative chunked size

CVE-2024-29510 — Format string injection in Ghostscript uniprint device (gdevupd.c)

CVE-2023-7008: GNU sed -i --follow-symlinks TOCTOU race enables arbitrary file overwrite

CVE-2023-7008: TOCTOU symlink race in sed --follow-symlinks

CVE-2022-28357: Heap buffer overflow in sed regex backreference handling

CVE-2013-0222: Buffer Overflow in coreutils sort via getmonth() with locale month names

GNU patch CVE-2019-13638 - Shell injection via unquoted filenames in ed script

CVE-2022-2509: Double-free in GnuTLS find_signer() during PKCS7 cert chain verification

CVE-2022-2509: Double-free in GnuTLS certificate SAN extension parsing

CVE-2021-20231 GnuTLS — Use-after-free via realloc-aliasing in TLS 1.3 client_hello extensions (key_share + pre_shared_key)

GnuTLS CVE-2021-20231: Use-After-Free in ECDHE Key Exchange Processing

CVE-2020-24659: GnuTLS NULL deref via no_renegotiation alert mid-handshake

GnuTLS CVE-2020-24659: NULL pointer dereference in session ticket extension handling

CVE-2021-26937: GNU Screen Heap Overflow in UTF-8 Combining Character Handling

CVE-2023-24626: GNU Screen OSC 83 escape sequence command injection

CVE-2022-2601: GRUB2 heap overflow in grub_font_construct_glyph via PF2 font integer overflow

GRUB2 CVE-2022-2601 - Heap Overflow in PF2 Font Glyph Loading via Integer Overflow

GRUB2 PNG Loader Heap Buffer Overflow Due to Off-by-One in Size Calculation

CVE-2024-25062 libxml2 use-after-free in xmlTextReaderValidateEntity