Firefox for Android vulnerabilities

In Firefox and Focus for Android, techniques were discovered to obscure the fullscreen notification, which could lead to user confusion and spoofing attacks. This affects Firefox for Android and Focus for Android versions prior to 112.

A spoofing issue exists in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.

Clickjacking vulnerability in the WebExtensions component in Firefox for Android. This issue was fixed in Firefox 153.

Vulnerability in the Privacy component in Firefox for Android. The flaw leads to information disclosure. The issue was fixed in Firefox 153.

When recording the screen while in Private Browsing on Firefox for Android, the address bar and keyboard were not hidden, potentially leaking sensitive information. This bug only affects Firefox for Android and Focus for Android versions prior to 112.

Potential use-after-free in libaudio, fixed by disabling AAudio backend on Android below version 30. Affects only Firefox for Android before 110.1.0.

A website that had permission to access the microphone could record audio without the audio notification being shown. This bug does not allow the attacker to bypass the permission prompt - it only affects the notification shown once permission has been granted. This bug only affects Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 104.

By attempting to connect to a website using an unresponsive port, an attacker could control the content of a tab while the URL bar displayed the original domain. Affects Firefox for Android < 84.

A malicious app on the user's device could broadcast an Intent to Firefox for Android with arbitrary headers, leading to attacks such as abusing ambient authority or session fixation. This was fixed by only allowing certain safe-listed headers. Affects Firefox < 84.

Vulnerability in Firefox for Android related to the Remote Debugging via USB feature, which was enabled on Android versions prior to 6.0. Untrusted apps could connect to the feature and operate with browser privileges to read and interact with web content.

OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some certificate revocations. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. Affects Firefox < 83.

When a user downloaded a file in Firefox for Android, if a cookie is set, it would be re-sent during a subsequent file download on the same domain, regardless of private or non-private browsing modes. Affects Firefox < 83.

When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. This vulnerability affects Firefox < 83.

When typing a password under certain conditions, a race may have occurred where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.