CVE-2024-38414

Information disclosure while processing information on firmware image during core initialization.

CVE-2025-21433

Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.