Is this a flaw in the format or just bugs in implementations of viewers? Seems like it must just be fixable bugs. On the chart showing which viewers are vulner

Is this a flaw in the format or just bugs in implementations of viewers? Seems like it must just be fixable bugs. On the chart showing which viewers are vulnerable, some of them have no vulnerabilities. So in theory other viewers should be able to be fixed.