libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in bpfobjectopen (called from bpfobject_openmem and bpf-object-fuzzer.c).