When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1942716 | Permissions Required |
https://www.mozilla.org/security/advisories/mfsa2025-51/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
03 Jul 2025, 16:04
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1942716 - Permissions Required | |
References | () https://www.mozilla.org/security/advisories/mfsa2025-51/ - Vendor Advisory | |
First Time |
Google android
Mozilla firefox Mozilla |
|
CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
24 Jun 2025, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-24 13:15
Updated : 2025-07-03 16:04
NVD link : CVE-2025-6431
Mitre link : CVE-2025-6431
JSON object : View
Products Affected
mozilla
- firefox
- android
CWE
No CWE.