The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.