What law says software may not have bugs?!

[deleted]

Not explicitly laws, but like contracts, regulatory requirements, SLAs all indirectly enforce that

Well, they at least say that one is obligated to address bugs in a timely manner (where "not widely exploitable; won't fix" is a perfectly valid resolution).