Skip to content
OpenAdvisories
High · 7.5 CVE-2025-10535 EUVD-2025-29553GHSA-gwf4-vcvc-4rjv

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android

Published Sep 16, 2025 · Updated Aug 4, 2026 · Assigned by mozilla

Description

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 143

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 143.0-1.1 openSUSE-SU-2025:15565-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 143-r0 —

Advisories 3

References