If you discover a security issue in this library (e.g. a bug that could allow unintended device access, privilege escalation in host code, or improper handling of crypto material), please do not open a public GitHub issue.

Instead, open a GitHub Security Advisory on this repository, or contact the maintainers privately.

We will acknowledge reports within 72 hours and aim to release a fix within 14 days for confirmed issues.

This library communicates with physical hardware you connect to your own computer. It does not involve network services or remote access. Security concerns are primarily about:

• Improper handling of authentication keys (Auth/)
• Bugs in crypto utilities (Utils/CryptUtils.cs, MtkCrypto.cs)
• Unsafe memory operations that could affect the host process

This library is for research, development, and legitimate device recovery only. Do not use it on devices you do not own.