The low-severity NULL pointer dereference bug focused on NTFS and worked using a crafted USB volume.
Researchers uploaded a short proof of concept video on the exploit.
"Card readers? We don't need no stinking card readers." -- Peter da Silva (at the National Academy of Sciencies, 1965, in a particularly vivid fantasy)