CVE-2023-4911 Looney Tunables: heap overflow in glibc parse_tunables (GLIBC_TUNABLES env var)

CVE-2014-7169: Bash Shellshock incomplete fix – command injection via function import in non-POSIX mode

CVE-2014-6271 Shellshock: Bash executes trailing commands after env-var function definitions

CVE-2014-6271 Shellshock: bash parses past function boundary in env var imports

CVE-2021-3487: binutils readelf OOB read in fetch_indexed_string (.debug_str_offsets)

CVE-2020-16592: use-after-free in bfd_hash_lookup (binutils 2.34 BFD library)

CVE-2022-38126: Memory leak in binutils bfd/dwarf2.c read_abbrevs — partial abbrev not freed on error, re-parsing loop

CVE-2016-6321: GNU tar path traversal via --strip-components applied after safer_name_suffix

CVE-2022-48303: GNU tar 1.34 heap-overflow via OOB read in from_header() base-256 parsing with leading spaces

CVE-2019-5953: wget heap buffer overflow in do_conversion via incorrect E2BIG handling

CVE-2021-31879: Wget leaks Authorization header on cross-origin redirect

CVE-2018-20483: wget --xattr leaks URL credentials into user.xdg.origin.url extended attribute

CVE-2017-13089: wget skip_short_body() stack overflow via negative chunked size

CVE-2023-43115: Ghostscript IJS device bypasses SAFER, allowing path-traversal arbitrary file write and RCE

CVE-2020-15900: Ghostscript zbitshift integer overflow via off-by-one shift range check