nginx just has logical errors in addition to buffer overflows, e.g. CVE-2026-42946.