To report a security vulnerability, please send a detailed disclosure to security@lists.chipsalliance.org. This is a confidential mailing list, and the TAC chair and a small group of trusted individuals will review and act upon the report as appropriate.