CVEs affecting projects tracked on Release Alert, from NVD & OSV.
TIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff.