How to report a security vulnerability

If you have identified a security vulnerability on one or more of our devices, please report it to product.security@fairphone.com
We kindly ask that you provide us with relevant information that can help us to identify the security vulnerability and fix the potential security issue, which includes:

• Product name and software version(s) affected by the vulnerability
• A detailed description of the vulnerability
• Steps to reproduce the issue (you can also attach videos/screenshots/logs for a better understanding)
• A PoC (Proof of Concept) or exploit, if available
• Workaround found, if applicable
• Disclosure plans, if any

We also ask you to keep in mind our customers’ security: during the investigation and resolution phase, it is recommended not to disclose any information about the vulnerability and/or exploits connected to it, to avoid third parties using the security issue for malicious purposes.
 
We will keep you informed about the status of the investigation and when a resolution is ready.