Medium · 5.3 CVE-2026-14906 EUVD-2026-43521GHSA-prx6-r9g2-44x7

Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Platform: iOS Category: Browsers

Description

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	—	152.4

Advisories 1

WID-SEC-2026-2303 Mozilla Firefox: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jul 13, 2026

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2045842
https://www.mozilla.org/security/advisories/mfsa2026-66/

EUVD	v3.1	5.3
CISA-ADP	v3.1	5.3