PatchGap
Firefox · Core

CVE-2025-4090

Logic Error in Core
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionA vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat.
ComponentCore
Bug ClassLogic Error
Tracker1929478
Fix commite6eaee6ec050 (firefox) +1/-1
CISA KEVNot listed
CreditedSeongyun Jeong
Disclosed2025-04-29

Files Changed

  • mobile/android/geckoview/src/main/java/org/mozilla/gecko/mozglue/GeckoLoader.java

Patch

view commit
diff --git a/mobile/android/geckoview/src/main/java/org/mozilla/gecko/mozglue/GeckoLoader.java b/mobile/android/geckoview/src/main/java/org/mozilla/gecko/mozglue/GeckoLoader.java
index e2cbe9eccb1..03ead94beac 100644
--- a/mobile/android/geckoview/src/main/java/org/mozilla/gecko/mozglue/GeckoLoader.java
+++ b/mobile/android/geckoview/src/main/java/org/mozilla/gecko/mozglue/GeckoLoader.java
@@ -211,7 +211,7 @@ public final class GeckoLoader {
       throw new IllegalStateException("Invalid library path for libmozglue.so: " + mozglue);
     }
     final String base = mozglue.substring(0, lastSlash);
-    Log.i(LOGTAG, "Library base=" + base);
+    Log.d(LOGTAG, "Library base=" + base);
     return base;
   }
Loading diff…
On This Page