Mozilla Firefox Use-After-Free Vulnerability

Privilege escalation in Firefox for Android

Privilege escalation in Firefox for Android

Memory safety bugs present in Firefox 111

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially…

Mozilla developers reported memory safety bugs present in Firefox for Android 79

A select option could partially obscure security prompts

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs

Information disclosure in the Privacy component in Firefox for Android

A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions

Spoofing issue in Firefox for Android