CVEs affecting projects tracked on Release Alert, from NVD & OSV.
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.