I'd say, this is a security feature - even if the code is not the most secure.
Out of interest, did you report your findings from fuzzing? Did things got fixed?