Fix a typo saying that the cve was an out of bounds read instead of a write
release-2.x.y
2017-03-21, Gary Kramlich