In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
{ "urgency": "not yet assigned" }