I think it's this one, which came to light last month:

https://www.linux-magazine.com/Online/News/Decade-Old-Sudo-F...

Edited to add: Here's another article about it (you should be able to find quite a few more, too):

https://www.theregister.com/2021/01/26/qualys_sudo_bug/