The vulnerability (CWE-787) stems from missing type validation in property handling logic. The patches in both files add a 'type == typeToEnumerate' check to prevent type confusion. The absence of this check in the original code allowed attackers to manipulate object types and trigger out-of-bounds writes. The functions modifying property descriptors in these files are directly responsible for the unsafe memory operations, as shown by the critical addition of the type validation in the patches.