CVE-2019-9924: bash rbash escape via fall-back script interpretation and BASH_CMDS
CVE-2014-7169: Bash incomplete Shellshock fix — SEVAL_FUNCDEF bypassed via parser lookahead and line-continuation
CVE-2014-7169 — Bash Shellshock secondary injection via function-name parser interpolation
CVE-2014-7169: Shellshock secondary command-injection via invalid function identifiers
CVE-2019-18276: Bash restricted-bypass via enable builtin loading shared objects during startup
Bash CVE-2019-18276: Restricted Shell Bypass via Implicit Builtin Loading
CVE-2019-18276: bash disable_priv_mode leaks saved UID, exploitable via 'enable -f'
CVE-2014-6271: Shellshock - Function definition injection via environment variables
CVE-2014-6271 Shellshock: Bash executes trailing commands after function definition imported from env vars
CVE-2014-6271 Shellshock — bash function-import parser boundary bug
CVE-2023-1579: Heap overflow in binutils BFD COFF relocation handling
CVE-2021-3487: OOB read in binutils readelf fetch_indexed_string (DWARF .debug_str_offsets)
CVE-2021-3487: Out-of-bounds read in binutils readelf DWARF string offset processing
CVE-2020-16592: UAF in binutils BFD section merging
CVE-2022-38126: Memory leak in binutils BFD read_abbrevs() — unlinked cur_abbrev->attrs not freed on bfd_realloc failure
CVE-2022-38126: memory leak in binutils display_debug_abbrev
CVE-2022-38126: Memory Leak in BFD DWARF Abbreviation Table Handling
CVE-2017-8421: binutils objdump unbounded memory allocation via crafted ELF e_phnum / sh_size
CVE-2017-8421: binutils objdump unbounded allocation from forged ELF section metadata
CVE-2017-8421: Unbounded Memory Allocation in ELF Relocation Section Parsing