The bug could enable remote code-execution, information-siphoning or denial-of-service attacks.
Source: Threadpost