The software filters data in a way that causes it to be reduced or "collapsed" into an unsafe value that violates an expected security property.