Mozilla Firefox For Android vulnerabilities

• mozilla firefox, firefox for android +1 more Under certain conditions, an attacker with the ability to redirect users to a malicious site via... CVE-2024-8897 6.1 MediumSeptember 17, 2024
• mozilla firefox for android, focus for android, firefox focus +1 more +3 more When recording the screen while in Private Browsing on Firefox for Android the address bar and... CVE-2023-29546 6.5 MediumJune 19, 2023
• mozilla firefox for android, focus for android, firefox focus +1 more +3 more Different techniques existed to obscure the fullscreen notification in Firefox and Focus for... CVE-2023-29534 9.1 CriticalJune 19, 2023
• mozilla firefox for android, firefox mobile +1 more A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on... CVE-2023-25747 7.5 HighJune 19, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Mozilla developers Randell Jesup, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team... CVE-2023-29551 Fix available 8.8 HighApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Under certain circumstances, a call to the <code>bind</code> function may have resulted in the... CVE-2023-29549 Fix available 6.5 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain... CVE-2023-29547 Fix available 6.5 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more If multiple instances of resource exhaustion occurred at the incorrect time, the garbage... CVE-2023-29544 Fix available 6.5 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more An attacker could have caused memory corruption and a potentially exploitable use-after-free of a... CVE-2023-29543 Fix available 8.8 HighApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to... CVE-2023-29540 Fix available 6.1 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI... CVE-2023-29538 Fix available 4.3 MediumApril 12, 2023
• mozilla firefox, firefox for android, focus +2 more +4 more Multiple race conditions in the font initialization could have led to memory corruption and... CVE-2023-29537 Fix available 7.5 HighApril 12, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Mozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the... CVE-2023-29550 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.... CVE-2023-29548 Fix available 6.5 MediumApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be... CVE-2023-29541 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more When handling the filename directive in the Content-Disposition header, the filename would be... CVE-2023-29539 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker... CVE-2023-29536 Fix available 8.8 HighApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Following a Garbage Collector compaction, weak maps may have been accessed before they were... CVE-2023-29535 Fix available 6.5 MediumApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +4 more +6 more A website could have obscured the fullscreen notification by using a combination of <code>window... CVE-2023-29533 Fix available 4.3 MediumApril 11, 2023
• mozilla firefox, firefox esr, firefox for android +1 more +3 more If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype... CVE-2022-1802 Public exploitFix available EPSS 28.5% 8.8 HighMay 22, 2022
• mozilla firefox, firefox esr, firefox for android +1 more +3 more An attacker could have sent a message to the parent process where the contents were used to... CVE-2022-1529 Fix available EPSS 17.6% 8.8 HighMay 22, 2022
• mozilla firefox, firefox esr, firefox for android +4 more +6 more An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable... CVE-2022-26486 In KEVFix available 9.6 CriticalMarch 6, 2022
• mozilla firefox, firefox esr, firefox for android +4 more +6 more Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We... CVE-2022-26485 In KEVPublic exploitFix available EPSS 14.3% 8.8 HighMarch 6, 2022
• mozilla firefox, firefox for android +1 more A malicious webpage could have forced a Firefox for Android user into executing attacker... CVE-2021-29953 6.1 MediumJune 24, 2021
• mozilla firefox, firefox for android +1 more When Web Render components were destructed, a race condition could have caused undefined behavior... CVE-2021-29952 Fix available 7.5 HighMay 7, 2021
• mozilla firefox for android, firefox mobile +1 more When typing in a password under certain conditions, a race may have occured where the... CVE-2020-15671 3.1 LowOctober 1, 2020
• mozilla firefox, firefox esr, firefox for android +2 more +4 more Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these... CVE-2020-15670 Fix available 8.8 HighAugust 26, 2020
• mozilla firefox, firefox for android, firefox mobile +2 more A lock was missing when accessing a data structure and importing certificate information into the... CVE-2020-15668 Fix available 4.3 MediumAugust 26, 2020
• mozilla firefox, firefox for android, firefox mobile +2 more When trying to load a non-video in an audio/video context the exact status code (200, 302, 404,... CVE-2020-15666 Fix available 6.5 MediumAugust 26, 2020
• mozilla firefox, firefox esr, firefox for android +2 more +4 more By holding a reference to the eval() function from an about:blank window, a malicious webpage... CVE-2020-15664 Fix available 6.5 MediumAugust 26, 2020
• mozilla firefox, firefox for android, firefox mobile +2 more When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used;... CVE-2020-6829 Fix available 5.3 MediumAugust 5, 2020
• mozilla firefox, firefox for android, firefox mobile +2 more During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time... CVE-2020-12401 Fix available 4.7 MediumAugust 5, 2020
• mozilla firefox, firefox for android, firefox mobile +2 more When converting coordinates from projective to affine, the modular inversion was not performed in... CVE-2020-12400 Fix available 4.7 MediumAugust 5, 2020