Critical · published August 20, 2025
🚨 A well-timed Bluetooth connection is all an attacker needs to exploit this vulnerability in Firefox for iOS! 🔥 Think of it like a sneaky barista giving your coffee order to the wrong person at the counter — they just need to be close enough to hear your name and charm you into handing over your drink. With this vulnerability, a malicious page could trick users into using their passkey to log into an attacker's device instead of their own! If exploited, an attacker within Bluetooth range could easily log into a victim's account using their own passkey, leading to unauthorized access to personal data and accounts. This could result in identity theft or data breaches, making it a critical risk for users! This vulnerability could have devastating consequences, especially for those who rely on Bluetooth devices frequently.
Think of it like a sneaky barista giving your coffee order to the wrong person at the counter — they just need to be close enough to hear your name and charm you into handing over your drink. With this vulnerability, a malicious page could trick users into using their passkey to log into an attacker's device instead of their own! This vulnerability allows malicious pages to leverage Firefox for iOS to pass FIDO links to the operating system, triggering a hybrid passkey transport without proper user consent. An attacker nearby can manipulate this feature to gain access to the user's account.
If exploited, an attacker within Bluetooth range could easily log into a victim's account using their own passkey, leading to unauthorized access to personal data and accounts. This could result in identity theft or data breaches, making it a critical risk for users! This vulnerability could have devastating consequences, especially for those who rely on Bluetooth devices frequently. Immediately update Firefox for iOS and Focus for iOS to version 142 or later to patch this vulnerability. Additionally, consider reviewing Bluetooth security settings and being cautious with devices in close proximity when using Bluetooth features. You've got this! Stay vigilant and ensure your apps are up to date to keep your accounts secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 142.0 | 142.0 |
| mozilla/firefox_focus | < 142.0 | 142.0 |