CVE-2017-12481 was assigned to http://bugs.ledger-cli.org/show_bug.cgi?id=1222
and CVE-2017-12482 was assigned to
CVE-2017-12482 is probably entirely mitigated by the hardening build options and
it general is feels somewhat silly to assign CVE IDs for such crashes...
Secure-testing-team mailing list