Buffer overflows, integer array index overflows.
vulners.com/securityvulns/securityvulns:doc:3823
vulners.com/securityvulns/securityvulns:doc:4710