PatchGap
Firefox · Core

CVE-2025-6431

Logic Error in Core
Medium firefox Logic Error

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionWhen a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*
ComponentCore
Bug ClassLogic Error
Tracker1942716
CISA KEVNot listed
CreditedUmar Farooq
Disclosed2025-06-24

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page