If you think you have found an SCP-firmware security vulnerability, then please send an email to the security team at arm-security@arm.com.

Further details of reporting vulnerabilities can be found on the Arm Developer Website.