An out-of-bounds read occurs due to insufficient bounds checking. This flaw allows a malicious USB device to cause unexpected system termination or read kernel memory, which is the core memory area used by the operating system to manage hardware and processes.