{"id":"CVE-2024-0953","aliases":["EUVD-2024-16732","GHSA-whq9-vwxq-6f23"],"status":"published","title":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...","description":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS \u003c 129.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00307,"percentile":0.23791,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2024-02-05T16:48:33Z","modified":"2026-08-19T15:30:33Z","products":[{"vendor":"mozilla","product":"firefox for ios"},{"vendor":"mozilla","product":"firefox_mobile"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1837916","tags":["x_transferred","Exploit","Issue Tracking"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-36/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0953"},{"url":"https://www.mozilla.org/security/advisories/mfsa2024-36"},{"url":"https://github.com/advisories/GHSA-whq9-vwxq-6f23"}],"sources":{"cve":[{"id":"CVE-2024-0953","description":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS \u003c 129.","status":"published","published":"2024-02-05T16:48:33.899Z","modified":"2024-10-27T22:12:29.342Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-16732","description":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS \u003c 129.","status":"published","published":"2024-02-05T16:48:33Z","modified":"2024-10-27T22:12:29Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:16.619611Z"}],"ghsa":[{"id":"GHSA-whq9-vwxq-6f23","title":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...","description":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content.","status":"published","published":"2024-02-05T18:31:37Z","modified":"2026-03-20T05:03:07Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:06:43.427844Z"}],"nvd":[{"id":"CVE-2024-0953","description":"When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS \u003c 129.","status":"published","published":"2024-02-05T17:15:09.32Z","modified":"2026-08-19T15:30:33.807Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:09:34.891666Z"}]}}