Han Yan

The `com.transsion.tranfacmode.entrance.main.MainActivity` component within `com.transsion.tranfacmode` lacks proper permission controls. This allows third-party applications to construct intents and directly access ADB debugging functionality without requiring user interaction. This could potentially allow unauthorized access and control of the device.

An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning.

An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning.

A memory corruption issue can be triggered in the ESP-BLE-MESH component during provisioning due to the lack of a check for the `SegN` field of the Transaction Start PDU. This can lead to memory corruption-related attacks, potentially allowing an attacker to gain control of the entire system.