I spend a lot of time looking for bugs in cryptocurrency code. In spite of this finding, I'd say that Bitcoin Core is among the safest cryptocurrency applications. The average random C/C++ open source project suffers from far more potential issues, for example [1].
Related, here's an unfixed btcd (Go Bitcoin client) DoS [2].
Related, here's an unfixed btcd (Go Bitcoin client) DoS [2].
[1] https://bugs.chromium.org/p/oss-fuzz/issues/list?q=imagemagi...
[2] https://github.com/btcsuite/btcd/issues/1287