You say that. But the CVE is a memory corruption bug.