I recently discovered a slew of bugs in curl, which occur in all versions I have access to, including latest release at time of writing (7.32.0) and goes back to at least 7.19.7.

One of the bugs can be used to crash curl or systems using curl via exec (not libcurl), the others cause strange or incorrect behavior.