Bug 2374564 (CVE-2025-6431) - CVE-2025-6431 firefox: The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed
Summary: CVE-2025-6431 firefox: The prompt in Firefox for Android that asks before ope...
Keywords:
Status: NEW
Alias: CVE-2025-6431
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-06-24 13:01 UTC by OSIDB Bzimport
Modified: 2025-06-25 12:39 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-06-24 13:01:43 UTC 
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. 
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.
Note You need to log in before you can comment on or make changes to this bug.