@strypey @vhns it's only theoretical until someone spends the time and money to make it exploitable. This is like the entire basis of why the Linux kernel is just reporting every bug as a CVE now. You can't be certain what is really exploitable without expending a lot of resources.