The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.