Doesn&#x27;t surprise me. There&#x27;s been few breaks in prior SFI&#x2F;CFI&#x27;s. That&#x27;s why I&#x27;m not relying on CPI until strong peer review happens. There&#x27;s added risk since CFI concept is really a cheat to try to avoid full data or memory safety. They think they&#x27;ll get security and great performance with the cheat. They usually get the performance. ;)