I already found two in my career.

One in Turbo Pascal 5.5, which allowed to use local variables as the function name.

Another one in IBM JDK in Linux, which produced core dumps.

Both were discussed with their respective vendors.