In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed
https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313