Scope of Security Incidents

Security Incidents Within PSIRT Scope

The following security incidents are handled by the PixArt Product Security Incident Response Team (PSIRT):

• Security incidents involving PixArt products, including hardware and software.
• Security-related flaws in PixArt documentation, including inaccurate or incomplete security information or recommendations in datasheets, application notes, and other product documentation.
• Security-sensitive PixArt documents or security-relevant information regarding PixArt that are found in locations where they should not be accessible.

• Security-sensitive PixArt products that are found in unauthorized or inappropriate locations.

Cases Outside PSIRT Scope

The following cases are not within the scope of PSIRT:

• Vulnerabilities in PixArt IT systems, such as the PixArt website or WebSupport Portal, are not handled directly by PSIRT. However, you may report such issues to PSIRT, and they will be forwarded to the appropriate team within PixArt for separate handling.
• General product support, technical inquiries, and other non-security-related matters are not handled by PSIRT. Please contact the appropriate PixArt support channel for these inquiries.

For product support or technical inquiries, please submit your request through the PixArt WebSupport Portal.

For all other inquiries, please contact our Stakeholder Engagement Support team.

NOTE: emails concerning product support or other topics unrelated to product security will not be processed or responded to by PSIRT.

Vulnerability Handling Process

Security vulnerabilities in PixArt products are actively managed through the following process. Response times may vary depending on the nature, scope, and severity of the reported issue.

The vulnerability handling process consists of four key steps:

1. Reporting
Upon receiving a vulnerability report, PixArt will acknowledge the submission and provide the reporter with updates throughout the handling process, as appropriate.

2. Evaluation
PixArt will validate the reported potential vulnerability, assess the associated risks and impact, and assign an appropriate priority based on the findings.

3. Remediation
Where feasible, PixArt will develop and implement appropriate remediation measures, including mitigation strategies and/or fixes, to address the reported security vulnerability.

4. Communication
PixArt will communicate relevant information and remediation guidance directly to affected customers, as appropriate.

Reporting a Potential Security Vulnerability

If you believe you have discovered a potential security vulnerability in a PixArt product, please report it to PSIRT. We will acknowledge receipt of your vulnerability report within 48 hours. Our PSIRT will conduct an initial review to assess the reported information and provide an initial response within 10 business days. If additional details or clarification are required, we may contact you using the information you provided.

Please submit your report in English and include the following information, where available:

• Affected products and versions
• A detailed description of the vulnerability
• Information about any known exploits or exploitation methods