This is a great example of how format complexity creates security problems.
The same thing shows up in PDFs: two tools can read the same file and disagree about what's actually in it because they interpret the structure differently.
X.509, PDFs, Office docs. Whenever multiple implementations are making judgment calls on the same bytes, those edge cases become very interesting from a security perspective.