| # Reporting LLVM Security Issues |
| |
| To report security issues in LLVM, please follow the steps outlined on the |
| [LLVM Security Group](https://llvm.org/docs/Security.html#how-to-report-a-security-issue) |
| page. |
| |
| ## Security Issue Scope |
| |
| Many of LLVM's tools are explicitly **not** considered to be hardened against |
| malicious input. Bugs in LLVM tools like buffer overreads or crashes are |
| valuable to report [as Issues](https://github.com/llvm/llvm-project/issues), |
| but aren't always seen as security vulnerabilities. Please see |
| [our documentation](https://llvm.org/docs/Security.html#what-is-considered-a-security-issue) |
| for a more precise definition of a security issue in this repository. |
