The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6905.json"