CVE-2025-6431
Last modified
CVE-2025-6431 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 140.0 |
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1942716Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2025-51/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-6431?
How severe is CVE-2025-6431?
How do I fix CVE-2025-6431?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-64302Insufficient input sanitization in the dashboard label or pa…5.4
- CVE-2025-64304"FOD" App uses hard-coded cryptographic keys, which may allo…5.1
- CVE-2025-64305MicroServer copies parts of the system firmware to an unencr…7.1
- CVE-2025-64307The Brightpick Internal Logic Control web interface is acces…7.1
- CVE-2025-64308The Brightpick Mission Control web application exposes hardc…7.1
- CVE-2025-64309The affected product discloses device telemetry, configurati…7.4
- CVE-2025-64310EPSON WebConfig and Epson Web Control for SEIKO EPSON Projec…9.8
- CVE-2025-64311Permission control vulnerability in the Notepad module. Impa…5.5
- CVE-2025-64312Permission control vulnerability in the file management modu…7.5
- CVE-2025-64313Denial of service (DoS) vulnerability in the office service.…5.5
- CVE-2025-64314Permission control vulnerability in the memory management mo…5.5
- CVE-2025-64315Configuration defect vulnerability in the file management mo…7.1
Are you affected by CVE-2025-6431?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST