The issue is related to an out-of-bounds read that can be addressed with improved input validation. Processing maliciously crafted web content may result in the disclosure of process memory. A remote attacker can exploit this issue using a specially crafted web page or file, potentially allowing them to reveal the contents of process memory.