You don't know that. Depending on the type of bug (for example a string overflow) simply accepting data from someone else could trigger it.