[unsnap_biceps]

They do not. They require arbitrary code execution on the main cpu to be used.

[keisborg]

So, they are basically saying that bash is vulnerable to arbitrary command execution?

[unsnap_biceps]

Yes