CVE-2025-54145 | THREATINT

Description

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS < 141.

PUBLISHED Reserved 2025-07-17 | Published 2025-08-19 | Updated 2025-08-20 | Assigner mozilla

Problem types

Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites

Product status

Any version before 141

affected

Credits

James Lee

References

bugzilla.mozilla.org/show_bug.cgi?id=1946122

www.mozilla.org/security/advisories/mfsa2025-60/

cve.org (CVE-2025-54145)

nvd.nist.gov (CVE-2025-54145)

Download JSON