The critical and important-severity flaws were found by a team at the China-based Tiunfu Cup hacking challenge.
Source: threatpost.com