diff --git a/SECURITY.md b/SECURITY.md
index 2f0ae5b28..5227f98e7 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -15,4 +15,6 @@ We *don't* consider following issues as vulnerabilities:
 
 * Runtime C undefined behavior (including integer overflow)
 * Crash caused by misused API
-* Crash caused by tweaked compiled binary
+* Crash caused by modified compiled binary
+* ASAN/Valgrind warning for too big memory allocation
+  mruby assumes `malloc(3)` returns `NULL` for too big allocations