GNU sed -i --follow-symlinks TOCTOU race → arbitrary file overwrite (CVE-2023-7008)

CVE-2017-18018: TOCTOU race in coreutils chown/chgrp/chmod -R via symlink swap

CVE-2017-18018: TOCTOU race condition in coreutils chown -R -L (restricted_chown bypass)

CVE-2019-13636: GNU patch v2.7.6 symlink-following in create_file() allows writing to arbitrary files

CVE-2018-6952: GNU patch double-free in another_hunk via ptrn_missing+repl_missing

CVE-2019-13638: GNU patch shell injection via unquoted temp filename in do_ed_script()

CVE-2019-13638: GNU patch shell injection via popen() in do_ed_script

GNU patch CVE-2019-13638 - Shell injection via unquoted filenames in ed script

CVE-2022-2509: Double-free in GnuTLS find_signer() during PKCS7 cert chain verification

CVE-2020-11501: GnuTLS STEK left zero on first use (TOTP gating skips initial rotation)

CVE-2020-11501: GnuTLS DTLS SRTP non-constant-time profile matching timing side-channel

CVE-2021-20231 GnuTLS — Use-after-free via realloc-aliasing in TLS 1.3 client_hello extensions (key_share + pre_shared_key)

CVE-2020-24659: GnuTLS NULL deref via no_renegotiation alert mid-handshake

CVE-2021-26937: GNU Screen heap overflow in UTF-8 combining character LRU pool (utf8_handle_comb)

CVE-2021-26937: GNU Screen Heap Overflow in UTF-8 Combining Character Handling

CVE-2023-24626: GNU Screen OSC 83 escape sequence command injection

CVE-2021-3696: Heap OOB R/W in GRUB2 grub_png_insert_huff_item

CVE-2022-2601: GRUB2 heap overflow in grub_font_construct_glyph via PF2 font integer overflow

CVE-2021-3695: GRUB2 PNG loader heap overflow in 16-bit grayscale conversion (d1 += 4 stride bug)

CVE-2020-10713 BootHole: heap overflow in grub_script_lexer_record