Security advisories
Where MAGDOX publishes advisories for vulnerabilities in its own products and services: FDIE by Magdox (the web console, the API and the analysis engines) and the MAGDOX websites in our disclosure policy's scope.
Advisories for MAGDOX products
No advisories yet
No advisories have been published yet. When we confirm a vulnerability in our products that qualifies for a CVE ID, its advisory is published here, newest first.
What each advisory contains
| Part | What it gives |
|---|---|
| CVE ID | The CVE ID, once one is assigned. |
| Affected | The product and component, and the affected versions or, for the hosted service, the dates it was affected. |
| Severity | Critical, high, medium or low, with the CVSS v4.0 vector behind it. |
| Description | What the vulnerability is and where it was. |
| Impact | What an attacker could do with it, and what they would need first. |
| Fix | What we changed and when, and whether you need to do anything. A fix to the hosted service often needs no action from customers. |
| Credit | The person who reported it, with their consent. |
| Dates | When the advisory was published and last updated, with a history of every revision. |
CVE IDs
For a qualifying vulnerability in our products, we request a CVE ID and publish the advisory here once the fix is in place. MAGDOX does not assign CVE IDs itself: we request them from a CVE Numbering Authority. The owners of affected organisations also hear from us directly.
How reports reach us and how we respond is set out in our responsible disclosure policy.
Reported by MAGDOX research
Vulnerabilities our team found in other projects and reported to their maintainers. Each is listed only after the maintainer has published it.
OpenIPC firmware: hisi-gpio-watcher off-by-one heap overflow
Published by OpenIPC on 25 October 2026
- Severity
- Low
- Weakness
- CWE-193, off-by-one error
- CVE
- No CVE requested by the maintainer
Report a vulnerability
Found a security problem in FDIE by Magdox or one of our websites? Email security@magdox.io. Our responsible disclosure policy sets out what you may test, how we respond and the safe harbour we give good-faith research.