CVE-2020-15671

LowCVSS 3.1

Published: 01/10/2020(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

40th percentile - higher than 40% of all known CVEs

Summary

When typing a password under certain conditions, a race may have occurred where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.

Risk Assessment

The risk is that user passwords may be saved to the keyboard dictionary, potentially facilitating later interception by third parties or malicious software.

Recommendation

It is recommended to update Firefox for Android to version 80 or later to eliminate this vulnerability.

Original NVD description (English source)

When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.