MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.
mcpp project mcpp 2.7.2
opensuse leap 15.1
opensuse backports sle 15.0