TLDR: The vector registers this bug affects are used for string functions like strcmp, so anything could get loaded into them, including passwords.