CVE-2022-29910
When closed or sent to the background, Firefox for Android would not properly record and persist...
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
- Record
CVE-2022-29910- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
CVE List
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
- Record
CVE-2022-29910- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
EUVDEUVD-2022-34220
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
- Record
EUVD-2022-34220- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3gq8-8fwh-fc7q
When closed or sent to the background, Firefox for Android would not properly record and persist...
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
- Record
GHSA-3gq8-8fwh-fc7q- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-601
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-29910
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 100.
- Record
ALPINE-CVE-2022-29910- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-03
OSVopenSUSE-SU-2024:12044-1 No score
MozillaFirefox-100.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-100.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12044-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxAlpine:v3.16 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.17 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.18 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.19 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.20 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.21 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.22 |
before 100.0-r0 | 100.0-r0 |
firefoxAlpine:v3.23 |
before 100.0-r0 | 100.0-r0 |
librewolfAlpine:v3.21 |
before 100.0-r0 | 100.0-r0 |
librewolfAlpine:v3.22 |
before 100.0-r0 | 100.0-r0 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
librewolfAlpine:v3.23 |
before 100.0-r0 | 100.0-r0 |
librewolfAlpine:v3.24 |
before 100.0-r0 | 100.0-r0 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 100.0-1.1 | 100.0-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29910 is a medium vulnerability (CVSS 6.1) in Mozilla Firefox, published December 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in firefox 100.0-r0.
References
mozilla.org/security/advisories/mfsa2022-16
bugzilla.mozilla.org/show_bug.cgi?id=1757138
nvd.nist.gov/vuln/detail/CVE-2022-29910
github.com/advisories/GHSA-3gq8-8fwh-fc7q
security.alpinelinux.org/vuln/CVE-2022-29910
suse.com/security/cve/CVE-2022-29909
Show 194 moreShow less
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,666 references. The JSON record has them.