There is a missing bounds check in inner loop of the escape handler for 0x7000014 that leads to a stack buffer overflow.