Security researcher Kenneth White told computing website Ars Technica: "It's not a sky-is-falling scenario.
"But it's true there's a very real prospect that a sizable portion of internet-facing services are at risk for hackers to crash, or worse, run remote code to attack others."
Google said it has released a patch to fix the problem, but manufacturers now need to roll out the update as soon as possible.