Description
When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | unspecified – < 129 | 129 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | firefox | 136.0.2-r0 | — |
Advisories 2
- WID-SEC-2024-1784 Mozilla Firefox für iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 6, 2024
- WID-SEC-2024-0342 Mozilla Firefox für iOS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 11, 2024