| CBMC-5.45.0 | cbmc | soundness issues | https://github.com/diffblue/cbmc/issues/6483 |
| Wireshark v3.6.1rc0 | wireshark | Use-of-uninitialized-value | https://gitlab.com/wireshark/wireshark/-/issues/17759 |
| lrzip v0.641 | lrzip | Use-after-free* | https://github.com/ckolivas/lrzip/issues/206 |
| Axel 2.17.10 | axel | Data Race | https://github.com/axel-download-accelerator/axel/issues/354 |
| Axel 2.17.10 | axel | Memory Leak | https://github.com/axel-download-accelerator/axel/issues/353 |
| SVF | wpa | Assertion failed’ | https://github.com/SVF-tools/SVF/issues/457 |
| Aget | aget | Heap Buffer-overflow | https://github.com/EnderUNIX/Aget/issues/4 |
| libming | listswf | Stack-overflow | https://github.com/libming/libming/issues/181 |
| libsixel v1.8.2 | sixel2png | Heap Buffer-overflow | https://github.com/saitoha/libsixel/issues/90 |
| tinyexr 0.9.5 | tinyexr | Heap Buffer-overflow | https://github.com/syoyo/tinyexr/issues/121 |
| mjs 1.20.1 | mjs | Stack-overflow* | https://github.com/cesanta/mjs/issues/106 |
| mjs 1.20.1 | mjs | Stack-overflow* | https://github.com/cesanta/mjs/issues/110 |
| mupdf 1.15.0-rc1 | muraster | Heap Buffer-overflow | https://bugs.ghostscript.com/show_bug.cgi?id=701034 |
| mupdf 1.15.0-rc1 | muraster | Use-after-free* | https://bugs.ghostscript.com/show_bug.cgi?id=701018 |
| imagemagick 7.0.8-43 | convert | Use-after-free* | https://github.com/ImageMagick/ImageMagick/issues/1554 |
| libheif v1.4.0 | heif-convert | Use-after-free* | https://github.com/strukturag/libheif/issues/123 |
| libosip2-5.1.0 | torture_test | Heap Buffer-overflow | https://savannah.gnu.org/bugs/index.php?56071 |
| gama 2.04 | gama-g3 | NULL pointer deference* | http://lists.gnu.org/archive/html/bug-gama/2019-04/msg00000.html |
| cflow 1.6 | cflow | Use-after-free* | http://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00001.html |
| cflow 1.6 | cflow | Heap Buffer-overflow* | http://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.html |
| Binutils 2.32 | gprof | Global Buffer-overflow | https://sourceware.org/bugzilla/show_bug.cgi?id=24402 |
| liblouis 3.9.0 | lou_checktable | Stack Buffer-overflow | https://github.com/liblouis/liblouis/issues/728 |
| liblouis 3.9.0 | lou_checktable | Global Buffer-overflow | https://github.com/liblouis/liblouis/issues/721 |
| Bison 3.3 | bison | Heap Buffer-overflow | http://lists.gnu.org/archive/html/bug-bison/2019-03/msg00007.html |
| Bison 3.3 | yacc | NULL pointer deference | http://lists.gnu.org/archive/html/bug-bison/2019-03/msg00008.html |
| recutils 1.8 | recfix | double free | http://lists.gnu.org/archive/html/bug-recutils/2019-03/msg00001.html |
| elfutils 0.176 | eu-readelf | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24398 |
| boolector 3.0.0 | boolector | Heap Buffer-overflow | https://github.com/Boolector/boolector/issues/42 |
| boolector 3.0.0 | boolector | Use-after-free | https://github.com/Boolector/boolector/issues/41 |
| elfutils 0.176 | eu-stack | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24387 |
| elfutils 0.176 | eu-strip | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24385 |
| lrzip 0.631 | lrzip | Invalid Address Read | https://github.com/ckolivas/lrzip/issues/109 |
| zziplib 0.13.69 | unzzip | Stack Buffer-overflow | https://github.com/gdraheim/zziplib/issues/70 |
| Binutils 2.32 | ld | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24340 |
| Binutils 2.32 | ld | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24339 |
| Binutils 2.32 | ld | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24338 |
| Binutils 2.32 | ld | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24337 |
| Binutils 2.32 | ld | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24336 |
| Binutils 2.32 | ld | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24334 |
| Binutils 2.32 | ld | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24333 |
| Binutils 2.32 | ld | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24332 |
| exiv2 0.27 | exiv2 | Uncontrolled-memory-allocation* | https://github.com/Exiv2/exiv2/issues/742 |
| exiv2 0.27 | exiv2 | Stack-overflow* | https://github.com/Exiv2/exiv2/issues/741 |
| openh264 1.8.0 | h264dec | Use After Free’ | https://github.com/cisco/openh264/issues/3108 |
| Binaryen 1.38.26 | wasm-opt | Heap Buffer-overflow* | https://github.com/WebAssembly/binaryen/issues/1900 |
| Binaryen 1.38.25 | wasm-as | NULL Pointer Dereference* | https://github.com/WebAssembly/binaryen/issues/1893 |
| Elfutils 0.175 | eu-nm | Heap Buffer-overflow | https://sourceware.org/bugzilla/show_bug.cgi?id=24140 |
| Binaryen 1.38.25 | wasm2js | Assertion failed’ | https://github.com/WebAssembly/binaryen/issues/1885 |
| Elfutils 0.175 | eu-readelf | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24116 |
| Binaryen 1.38.22 | wasm-opt | NULL Pointer Dereference* | https://github.com/WebAssembly/binaryen/issues/1881 |
| Binaryen 1.38.22 | wasm-opt | Heap Buffer-overflow* | https://github.com/WebAssembly/binaryen/issues/1880 |
| Binaryen 1.38.22 | wasm-opt | NULL Pointer Dereference* | https://github.com/WebAssembly/binaryen/issues/1879 |
| Binaryen 1.38.22 | wasm-opt | Assertion failed’ | https://github.com/WebAssembly/binaryen/issues/1878 |
| Binaryen 1.38.22 | wasm2js | Assertion failed’ | https://github.com/WebAssembly/binaryen/issues/1877 |
| Binaryen 1.38.22 | wasm2js | Heap Buffer-overflow* | https://github.com/WebAssembly/binaryen/issues/1876 |
| Elfutils 0.175 | eu-stack | Wild Pointer Deference* | https://sourceware.org/bugzilla/show_bug.cgi?id=24103 |
| Elfutils 0.175 | eu-nm | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=24102 |
| Binaryen 1.38.22 | wasm-opt | Assertion failed* | https://github.com/WebAssembly/binaryen/issues/1872 |
| Binaryen 1.38.22 | wasm-as | NULL Pointer Dereference* | https://github.com/WebAssembly/binaryen/issues/1867 |
| Binaryen 1.38.22 | wasm-opt | Uncontrolled-memory-allocation* | https://github.com/WebAssembly/binaryen/issues/1866 |
| Binaryen 1.38.22 | wasm-megre | Use After Free* | https://github.com/WebAssembly/binaryen/issues/1865 |
| Binaryen 1.38.22 | wasm-megre | Heap Buffer-overflow* | https://github.com/WebAssembly/binaryen/issues/1864 |
| Binaryen 1.38.22 | wasm2js | Heap Buffer-overflow* | https://github.com/WebAssembly/binaryen/issues/1863 |
| Elfutils 0.174 | eu-readelf | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=24089 |
| Elfutils 0.174 | eu-strip | Memory Leak’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24086 |
| Elfutils 0.174 | eu-ar | Uncontrolled-memory-allocation* | https://sourceware.org/bugzilla/show_bug.cgi?id=24085 |
| Elfutils 0.174 | eu-elflint | Negative-size-param* | https://sourceware.org/bugzilla/show_bug.cgi?id=24084 |
| Elfutils 0.174 | eu-readelf | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=24081 |
| Elfutils 0.174 | eu-readelf | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=24075 |
| flex 2.6.4 | flex | Stack-overflow* | https://github.com/westes/flex/issues/414 |
| NASM 2.14.03rc1 | nasm | Stack-overflow* | https://bugzilla.nasm.us/show_bug.cgi?id=3392549 |
| NASM 2.14.03rc1 | nasm | Stack-overflow* | https://bugzilla.nasm.us/show_bug.cgi?id=3392548 |
| yaml-cpp 0.6.2 | prase | Stack-overflow* | https://github.com/jbeder/yaml-cpp/issues/657 |
| NASM 2.14rc16 | ndisam | Stack Buffer-overflow’ | https://bugzilla.nasm.us/show_bug.cgi?id=3392547 |
| NASM 2.14rc16 | ndisam | Stack Buffer-overflow’ | https://bugzilla.nasm.us/show_bug.cgi?id=3392546 |
| NASM 2.14rc16 | ndisam | Stack Buffer-overflow’ | https://bugzilla.nasm.us/show_bug.cgi?id=3392545 |
| LibRaw 0.19.2 | dcraw_emu | Memory leak’ | https://github.com/LibRaw/LibRaw/issues/196 |
| NASM 2.14rc16 | nasm | Global Buffer-overflow* | https://bugzilla.nasm.us/show_bug.cgi?id=3392544 |
| Bento4 v1.5.1-624 | avcinfo | Heap Buffer-overflow* | https://github.com/axiomatic-systems/Bento4/issues/355 |
| Bento4 v1.5.1-624 | mp4dump | Uncontrolled-memory-allocation* | https://github.com/axiomatic-systems/Bento4/issues/354 |
| Bento4 v1.5.1-624 | mp42hls | Global Buffer-overflow’ | https://github.com/axiomatic-systems/Bento4/issues/353 |
| Bento4 v1.5.1-624 | mp42hls | Invalid Address Read* | https://github.com/axiomatic-systems/Bento4/issues/352 |
| Bento4 v1.5.1-624 | mp42hls | Assertion failed* | https://github.com/axiomatic-systems/Bento4/issues/351 |
| tinyexr v0.9.5 | test_tinyexr | Uncontrolled-memory-allocation* | https://github.com/syoyo/tinyexr/issues/104 |
| tinyexr v0.9.5 | test_tinyexr | Uncontrolled-memory-allocation’ | https://github.com/syoyo/tinyexr/issues/103 |
| tinyexr v0.9.5 | test_tinyexr | Heap Buffer-overflow’ | https://github.com/syoyo/tinyexr/issues/102 |
| tinyexr v0.9.5 | test_tinyexr | Invalid Address Read’ | https://github.com/syoyo/tinyexr/issues/101 |
| htslib v1.9 | tabix | Invalid Address Read’ | https://github.com/samtools/htslib/issues/810 |
| Binutils 2.31 | c++filt | Heap Buffer-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 |
| Binutils 2.31 | c++filt | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=24043 |
| Binutils 2.31 | ld | Global Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24042 |
| Binutils 2.31 | ld | Invalid Address Read* | https://sourceware.org/bugzilla/show_bug.cgi?id=24041 |
| jasper v2.0.14 | jasper | Assertion failed’ | https://github.com/mdadams/jasper/issues/190 |
| libming v0.4.8 | swftocxx | Heap Buffer-overflow* | https://github.com/libming/libming/issues/168 |
| Mini Xml v2.1 | mxmldoc | Stack Buffer-overflow* | https://github.com/michaelrsweet/mxml/issues/237 |
| Mini Xml v2.1 | mxmldoc | Use-after-free* | https://github.com/michaelrsweet/mxml/issues/237 |
| Binutils 2.31 | ld | Memory leak’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24007 |
| Binutils 2.31 | c++filt | Memory leak* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88539 |
| Binutils 2.31 | c++filt | memory leak* | https://sourceware.org/bugzilla/show_bug.cgi?id=24002 |
| Binutils 2.31 | objdump | memory leak’ | https://sourceware.org/bugzilla/show_bug.cgi?id=24001 |
| Binutils 2.31 | nm | memory leak* | https://sourceware.org/bugzilla/show_bug.cgi?id=23952 |
| Binutils 2.31 | nm | Stack-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681 |
| Binutils 2.31 | nm | Stack-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675 |
| Binutils 2.31 | ld | NULL Pointer Dereference* | https://sourceware.org/bugzilla/show_bug.cgi?id=23806 |
| Binutils 2.31 | ld | NULL Pointer Dereference* | https://sourceware.org/bugzilla/show_bug.cgi?id=23805 |
| Binutils 2.31 | ld | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=23804 |
| Binutils 2.31 | c++filt | Stack-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87636 |
| Binutils 2.31 | c++filt | Integer overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=23767 |
| Binutils 2.31 | c++filt | Uncontrolled-memory-allocation* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87602 |
| Binutils 2.31 | ld | NULL-Pointer dereference’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23772 |
| Binutils 2.31 | objdump | Uncontrolled-memory-allocation’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23771 |
| Binutils 2.31 | c++filt | Stack-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87333 |
| Binutils 2.31 | c++filt | Stack-overflow* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87335 |
| Binutils 2.31 | c++filt | NULL Pointer Dereference* | https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87350 |
| Binutils 2.31 | objdump | Invalid Address Read* | https://sourceware.org/bugzilla/show_bug.cgi?id=23770 |
| Elfutils 0.174 | eu-ranlib | Divide-by-zero* | https://sourceware.org/bugzilla/show_bug.cgi?id=23786 |
| Elfutils 0.174 | eu-size | Invalid Address Read* | https://sourceware.org/bugzilla/show_bug.cgi?id=23787 |
| Elfutils 0.174 | eu-readelf | Negative-size-param’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23782 |
| Elfutils 0.174 | eu-stack | Invalid Address Read* | https://sourceware.org/bugzilla/show_bug.cgi?id=23752 |
| Elfutils 0.174 | eu-stack | Invalid Address Read’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23753 |
| Elfutils 0.174 | eu-ar | NULL-Pointer Dereference’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23754 |
| Elfutils 0.174 | eu-findtextrel | Divide-by-zero’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23755 |
| Elfutils 0.173 | eu-addr2line | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=23541 |
| Elfutils 0.173 | eu-nm | Double Free* | https://sourceware.org/bugzilla/show_bug.cgi?id=23528 |
| Elfutils 0.173 | eu-readelf | Heap Buffer-overflow* | https://sourceware.org/bugzilla/show_bug.cgi?id=23529 |
| Elfutils 0.173 | eu-elflint | Heap Buffer-overflow’ | https://sourceware.org/bugzilla/show_bug.cgi?id=23542 |
| LibTIFF 4.0.9 | tiff2pdf | Heap Buffer-overflow* | http://bugzilla.maptools.org/show_bug.cgi?id=2816 |
| libexe | exeinfo | Heap Buffer-overflow* | https://github.com/libyal/libexe/issues/1 |
| ImageMagick | magick identify | Uncontrolled-memory-allocation’ | https://github.com/ImageMagick/ImageMagick/issues/1350 |
| ImageMagick | magick | Memory Leak’ | https://github.com/ImageMagick/ImageMagick/issues/1403 |
| liblnk | lnkinfo | Heap Buffer-overflow’ | https://github.com/libyal/liblnk/issues/36 |
