This vulnerability doesn't appear to have anything to do with the "memory, paging and protection model for X86".

It's just a common-or-garden access beyond the end of an array.