That is assuming that it is easy to tell the difference between security and non-security bugs. Null pointer dereferences can and have been exploited to escape

That is assuming that it is easy to tell the difference between security and non-security bugs. Null pointer dereferences can and have been exploited to escape security sandboxes. I read about an interesting one a few years in flash. unfortunately all i can find now are secondary sources (http://www.zdnet.com/blog/security/mark-dowds-null-pointer-dereference-exploit-and-advanced-flash-actionscript-techiques-proove-definitively-aliens-do-exist/1030 http://www.zdnet.com/blog/security/mark-dowds-null-pointer-d...).