PatchGap
Firefox · Core

CVE-2025-0246

Logic Error in Core
Medium firefox Logic Error

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionWhen using an invalid protocol scheme, an attacker could spoof the address bar. <br>*Note: This issue only affected Android operating systems. Other operating systems are unaffected.*<br>*Note: This issue is a different issue from CVE-2025-0244.
ComponentCore
Bug ClassLogic Error
Tracker1912709
CISA KEVNot listed
CreditedJames Lee
Disclosed2025-01-07

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page