Comment by saurik

> It is a valid bug.

But is it a high-severity security bug?