Vulnerability CVE-2025-0246: Information

Description

When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.* *Note: This issue is a different issue from CVE-2025-0244. This vulnerability affects Firefox < 134.

URL: https://nvd.nist.gov/vuln/detail/CVE-2025-0246
Published: Jan. 7, 2025
Modified: Jan. 8, 2025

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus134.0-alt1134.0.2-alt1ALT-PU-2025-1063-2368493Fixed
firefoxsisyphus_riscv64134.0-alt0.port134.0.1-alt0.portALT-PU-2025-1265-1-Fixed
firefoxsisyphus_loongarch64134.0-alt0.port134.0.1-alt0.portALT-PU-2025-1271-1-Fixed
firefoxp11134.0.2-alt1133.0.0-alt1ALT-PU-2025-1984-1371739Testing

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1912709
    https://www.mozilla.org/security/advisories/mfsa2025-01/
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.12.2
      Back to top