The optimizer can wrongly remove essential bounds checks, allowing memory access outside allocated arrays. An attacker can exploit this by delivering a crafted HTML or JavaScript payload that ...