The affected product is vulnerable to an out-of-bounds read, which may result in code execution
CWE-125