The issue arises from the cycle collection implementation not properly determining the thread for release of an image object. This allows remote attackers to execute arbitrary code or cause a denial of service via a large HTML document containing IMG elements, potentially leading to a race condition and application crash.