When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1942716 | Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2025-51/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Jul 2025, 16:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Google android
Mozilla firefox Mozilla |
|
| CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1942716 - Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2025-51/ - Vendor Advisory |
24 Jun 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-24 13:15
Updated : 2025-07-03 16:04
NVD link : CVE-2025-6431
Mitre link : CVE-2025-6431
JSON object : View
Products Affected
mozilla
- firefox
- android
CWE
No CWE.
