Critical · published August 20, 2025
🚨 A seemingly innocent QR code could unleash chaos! If tricked into scanning a malicious link, users might find themselves navigating to arbitrary websites without a second thought. 🔥 Think of it like having a friendly-looking stranger handing you a piece of candy, only to find out the wrapper leads you into a creepy alley. Just like that candy can lead to trouble, this vulnerability can redirect users to dangerous sites! If exploited, an attacker could guide users to phishing pages or malicious downloads, potentially compromising personal data or even installing malware. With a CVSS score of 9.1, this is an absolute game changer for anyone using Firefox on iOS!
Think of it like having a friendly-looking stranger handing you a piece of candy, only to find out the wrapper leads you into a creepy alley. Just like that candy can lead to trouble, this vulnerability can redirect users to dangerous sites! This vulnerability allows arbitrary URLs to be opened through Firefox's open-text URL scheme when a user scans a designed QR code, leading to unexpected and potentially harmful site visits.
If exploited, an attacker could guide users to phishing pages or malicious downloads, potentially compromising personal data or even installing malware. With a CVSS score of 9.1, this is an absolute game changer for anyone using Firefox on iOS! To protect yourself, update Firefox for iOS to version 141 immediately. Educate users on scanning QR codes and encourage them to verify the links they encounter. Don't let a rogue QR ruin your day! You've got this! Stay ahead of the curve and secure your browsing environment! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 141.0 | 141.0 |