GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-28587.json"