If you can’t upgrade immediately, the most effective ways to reduce your risk are the following:

    Define the GIT_CEILING_DIRECTORIES environment variable to contain the parent directory of your user profile (i.e., /Users on macOS,
    /home on Linux, and C:\Users on Windows).

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation 
violation in convert_strings in tinfo/read_entry.c in the terminfo library.

src/cff/cffgload.c (cff_slot_load) [FT_CONFIG_OPTION_SVG]:Fix segfault.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file 
contains = (equal sign) characters but is not a valid credentials file.

Use after free in append_command in GitHub repository vim/vim prior to 8.2. 
This vulnerability is capable of crashing software, Bypass Protection Mechanism, 
Modify Memory, and possible remote execution

xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered 
by (for example) sending a crafted PDF document to the pdftoppm binary. 
It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. 
Through a crafted XCF file, the program will allocate for a huge amount of memory,
resulting in insufficient memory or program crash.

Jacob Boerema @Wormnest · 2 weeks ago

Should be fixed now in both master and the next stable release.

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Fix int32 overflow in FormattedStringBuilder

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.