deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41766
Published: 2025-01-04
Description: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3  could allow a remote attacker to cause a denial of service using a complex regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://www.ibm.com/support/pages/node/7180203
CVE: CVE-2024-41767
Published: 2025-01-04
Description: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://www.ibm.com/support/pages/node/7180199
CVE: CVE-2024-41768
Published: 2025-01-04
Description: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the connection in an unexpected or insecure state.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-544
References: https://www.ibm.com/support/pages/node/7180202
CVE: CVE-2025-0211
Published: 2025-01-04
Description: A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-73
References: https://github.com/shaturo1337/POCs/blob/main/LFI%20in%20School%20Faculty%20Scheduling%20System.md; https://vuldb.com/?ctiid.290156; https://vuldb.com/?id.290156
CVE: CVE-2025-0212
Published: 2025-01-04
Description: A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /view_students.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20Student%20Grading%20System.md; https://vuldb.com/?ctiid.290157; https://vuldb.com/?id.290157
CVE: CVE-2025-0213
Published: 2025-01-04
Description: A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/shaturo1337/POCs/blob/main/Remote%20Code%20Execution%20via%20Arbitrary%20File%20Upload%20in%20Project%20Management%20System.md; https://vuldb.com/?ctiid.290158; https://vuldb.com/?id.290158
CVE: CVE-2025-0214
Published: 2025-01-04
Description: A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument headermenu_id leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://gist.github.com/mcdruid/ff4f29f4e7830e9e91988c7195d77039; https://vuldb.com/?ctiid.290159; https://vuldb.com/?id.290159
CVE: CVE-2024-13130
Published: 2025-01-05
Description: A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-24
References: https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4; https://vuldb.com/?ctiid.290204; https://vuldb.com/?id.290204
CVE: CVE-2024-13131
Published: 2025-01-05
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9680. Reason: This candidate is a reservation duplicate of CVE-2019-9680. Notes: All CVE users should reference CVE-2019-9680 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-13132
Published: 2025-01-05
Description: A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/309; https://github.com/emlog/emlog/issues/309#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290206
CVE: CVE-2024-13133
Published: 2025-01-05
Description: A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/ZeroWdd/studentmanager/issues/16; https://github.com/ZeroWdd/studentmanager/issues/16#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290207
CVE: CVE-2025-0219
Published: 2025-01-05
Description: A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://vuldb.com/?ctiid.290198; https://vuldb.com/?id.290198; https://vuldb.com/?submit.464906
CVE: CVE-2024-13134
Published: 2025-01-05
Description: A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/ZeroWdd/studentmanager/issues/16; https://github.com/ZeroWdd/studentmanager/issues/16#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290208
CVE: CVE-2024-13135
Published: 2025-01-05
Description: A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/311; https://github.com/emlog/emlog/issues/311#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290209
CVE: CVE-2024-13136
Published: 2025-01-05
Description: A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the file src/main/java/com/mysiteforme/admin/config/ShiroConfig.java. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502, CWE-502
References: https://github.com/wangl1989/mysiteforme/issues/52; https://github.com/wangl1989/mysiteforme/issues/52#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290210
CVE: CVE-2024-13137
Published: 2025-01-05
Description: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/wangl1989/mysiteforme/issues/54; https://github.com/wangl1989/mysiteforme/issues/54#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290211
CVE: CVE-2024-13138
Published: 2025-01-05
Description: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file src/main/java/com/mysiteform/admin/service/ipl/LocalUploadServiceImpl. The manipulation of the argument test leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/wangl1989/mysiteforme/issues/55; https://github.com/wangl1989/mysiteforme/issues/55#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290212
CVE: CVE-2024-13139
Published: 2025-01-05
Description: A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main/java/com/mysiteform/admin/controller/system/FileController. The manipulation of the argument content leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/wangl1989/mysiteforme/issues/56; https://github.com/wangl1989/mysiteforme/issues/56#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290213
CVE: CVE-2024-13140
Published: 2025-01-05
Description: A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/emlog/emlog/issues/312; https://github.com/emlog/emlog/issues/312#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290214
CVE: CVE-2025-0220
Published: 2025-01-05
Description: A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/renanmalafatti/CVE/blob/main/CVE-2025-0220.md; https://vuldb.com/?ctiid.290199; https://vuldb.com/?id.290199
CVE: CVE-2024-13141
Published: 2025-01-05
Description: A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/Hebing123/cve/issues/83; https://vuldb.com/?ctiid.290224; https://vuldb.com/?id.290224
CVE: CVE-2025-0221
Published: 2025-01-05
Description: A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404, CWE-476, CWE-476
References: https://shareforall.notion.site/IOBit-Protected-Folder-pffilter-0x22200C-NPD-DOS-15260437bb1e80b2a477d42396d5d06c; https://vuldb.com/?ctiid.290200; https://vuldb.com/?id.290200
CVE: CVE-2025-0222
Published: 2025-01-05
Description: A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404, CWE-476, CWE-476
References: https://shareforall.notion.site/IOBit-Uninstaller-IUProcessFilter-0x8001E000-NPD-DOS-15260437bb1e809c81bbc484c53b17bc; https://vuldb.com/?ctiid.290201; https://vuldb.com/?id.290201
CVE: CVE-2025-0223
Published: 2025-01-05
Description: A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404, CWE-476, CWE-476
References: https://shareforall.notion.site/IOBit-Uninstaller-IURegistryFilter-0x8001E000-NPD-DOS-15260437bb1e80e482e0e3c9b22b58d0; https://vuldb.com/?ctiid.290202; https://vuldb.com/?id.290202
CVE: CVE-2025-0224
Published: 2025-01-05
Description: A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4; https://vuldb.com/?ctiid.290203; https://vuldb.com/?id.290203
CVE: CVE-2025-0225
Published: 2025-01-05
Description: A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unknown functionality of the file /setting/ClassFy/exampleDownload.html. The manipulation of the argument name leads to path traversal: '/../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-25
References: https://github.com/BxYQ/ld/blob/main/file_read4/poc.py; https://github.com/BxYQ/ld/tree/main/file_read4; https://vuldb.com/?ctiid.290215
CVE: CVE-2025-0226
Published: 2025-01-05
Description: A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/BxYQ/ld/blob/main/file_read2/poc.py; https://github.com/BxYQ/ld/tree/main/file_read2; https://vuldb.com/?ctiid.290216
CVE: CVE-2025-0227
Published: 2025-01-05
Description: A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This affects an unknown part of the file /Logs/Annals/downLoad.html. The manipulation of the argument path leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/BxYQ/ld/blob/main/file_read1/poc.py; https://github.com/BxYQ/ld/tree/main/file_read1; https://vuldb.com/?ctiid.290217
CVE: CVE-2025-0228
Published: 2025-01-05
Description: A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://vuldb.com/?ctiid.290218; https://vuldb.com/?id.290218
CVE: CVE-2025-0229
Published: 2025-01-05
Description: A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0. This issue affects some unknown processing of the file /enquiry.php. The manipulation of the argument pid/t1/t2/t3/t4/t5/t6/t7 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Huandtx/cve/blob/main/cve/sql1.md; https://vuldb.com/?ctiid.290225
CVE: CVE-2025-0230
Published: 2025-01-05
Description: A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Huandtx/cve/blob/main/cve/Responsive%20Hotel%20Site/sql1.md; https://vuldb.com/?ctiid.290226
CVE: CVE-2025-0231
Published: 2025-01-05
Description: A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submit_payments.php. The manipulation of the argument m_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/gh464646/CVE/issues/1; https://vuldb.com/?ctiid.290227; https://vuldb.com/?id.290227
CVE: CVE-2025-0232
Published: 2025-01-05
Description: A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /successadmin.php. The manipulation of the argument psw leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/alc9700jmo/CVE/issues/7; https://vuldb.com/?ctiid.290228; https://vuldb.com/?id.290228
CVE: CVE-2024-13142
Published: 2025-01-05
Description: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ZeroWdd/manager-system/issues/6; https://vuldb.com/?ctiid.290230; https://vuldb.com/?id.290230
CVE: CVE-2025-0233
Published: 2025-01-05
Description: A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/course.php. The manipulation of the argument course_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/[PII_REDACTED]/CVE/issues/1; https://vuldb.com/?ctiid.290229; https://vuldb.com/?id.290229
CVE: CVE-2024-13143
Published: 2025-01-06
Description: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/ZeroWdd/manager-system/issues/7; https://vuldb.com/?ctiid.290231; https://vuldb.com/?id.290231
CVE: CVE-2024-13144
Published: 2025-01-06
Description: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/ZHENFENG13/My-Blog/issues/140; https://github.com/ZHENFENG13/My-Blog/issues/140#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290232
CVE: CVE-2024-13145
Published: 2025-01-06
Description: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/ZHENFENG13/My-Blog/issues/141; https://github.com/ZHENFENG13/My-Blog/issues/141#issue[PII_REDACTED]; https://vuldb.com/?ctiid.290233
CVE: CVE-2024-20105
Published: 2025-01-06
Description: In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09062027; Issue ID: MSV-1743.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2025