CVE-2022-40303: Integer overflow in libxml2 CDATA parsing buffer growth
CVE-2023-0286: Type confusion in OpenSSL GENERAL_NAME_cmp for X.400 addresses — ASN1_STRING* parsed but treated as ASN1_TYPE*
CVE-2023-0286: X.509 GeneralName Type Confusion in OpenSSL 3.0.7
CVE-2021-3711: OpenSSL SM2 Decryption Heap Overflow via sm2_plaintext_size() Miscalculation
CVE-2022-3602: OpenSSL 3.0 punycode stack buffer overflow in X.509 name constraint verification
CVE-2022-0778: OpenSSL BN_mod_sqrt infinite loop via non-prime modulus in Tonelli-Shanks
CVE-2022-0778 OpenSSL BN_mod_sqrt Infinite Loop in Tonelli-Shanks
CVE-2014-0160 Heartbleed: Missing bounds check in tls1_process_heartbeat allows out-of-bounds heap read
CVE-2020-8177: curl local file overwrite via symlink with -J and -i options
CVE-2023-46218 — curl cookie mixed-case PSL bypass in Curl_cookie_add
CVE-2023-27534: curl SFTP tilde expansion path traversal in Curl_getworkingpath
CVE-2023-27534: curl SFTP path traversal via unsanitized tilde expansion in Curl_getworkingpath()
CVE-2023-38545: curl SOCKS5 state machine TOCTOU heap overflow via non-persistent socks5_resolve_local flag
CVE-2023-38545: SOCKS5 Heap Overflow from Hostname Length Truncation
CVE-2023-38545: curl SOCKS5 heap overflow via stale local resolve flag
CVE-2022-23218: Stack buffer overflow in glibc sunrpc clnt_create via long hostname
glibc CVE-2022-23218: Stack buffer overflow in sunrpc clnt_create() with long hostnames
CVE-2021-35942: glibc wordexp() integer overflow in w_addword via we_offs
CVE-2021-35942: Integer overflow in glibc wordexp() w_addword function
CVE-2024-2961: Buffer Overflow in glibc ISO-2022-CN-EXT iconv Converter