# Mozilla Firefox for Android.

Every CVE that names Mozilla Firefox for Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Open redirect in Mozilla Firefox for Android](https://agentprime.io/advisories/CVE-2024-8897.md)
  `CVE-2024-8897` · CVE record: Mozilla Firefox for Android · CVSS 6.1 Medium · Not analysed yet · Published 17 Sept 2024 · Tags: Open redirect
- [Mozilla Firefox for Android: When recording the screen while in Private Browsing on Firefox for Android the address…](https://agentprime.io/advisories/CVE-2023-29546.md)
  `CVE-2023-29546` · CVE record: Mozilla Firefox for Android and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2023
- [Mozilla Firefox for Android: Different techniques existed to obscure the fullscreen notification in Firefox and Focus…](https://agentprime.io/advisories/CVE-2023-29534.md)
  `CVE-2023-29534` · CVE record: Mozilla Firefox for Android and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2023
- [Use after free in Mozilla Firefox for Android](https://agentprime.io/advisories/CVE-2023-25747.md)
  `CVE-2023-25747` · CVE record: Mozilla Firefox for Android · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Out-of-bounds write in Mozilla Firefox for Android and others](https://agentprime.io/advisories/CVE-2023-29551.md)
  `CVE-2023-29551` · CVE record: Mozilla Firefox for Android and 2 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: Memory corruption
- [Memory safety bugs present in Firefox 111 and Firefox ESR 102.9.](https://agentprime.io/advisories/CVE-2023-29550.md)
  `CVE-2023-29550` · CVE record: Mozilla Firefox and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023
- [Weak encryption in Mozilla Firefox for Android and others](https://agentprime.io/advisories/CVE-2023-29549.md)
  `CVE-2023-29549` · CVE record: Mozilla Firefox for Android and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2023 · Tags: Weak cryptography or TLS
- [A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.](https://agentprime.io/advisories/CVE-2023-29548.md)
  `CVE-2023-29548` · CVE record: Mozilla Firefox and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox for Android: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same…](https://agentprime.io/advisories/CVE-2023-29547.md)
  `CVE-2023-29547` · CVE record: Mozilla Firefox for Android and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox for Android: If multiple instances of resource exhaustion occurred at the incorrect time…](https://agentprime.io/advisories/CVE-2023-29544.md)
  `CVE-2023-29544` · CVE record: Mozilla Firefox for Android and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2023
- [Improper output encoding in Mozilla Firefox for Android and others](https://agentprime.io/advisories/CVE-2023-29543.md)
  `CVE-2023-29543` · CVE record: Mozilla Firefox for Android and 2 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-116
- [Improper output encoding in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2023-29541.md)
  `CVE-2023-29541` · CVE record: Mozilla Firefox and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-116
- [Mozilla Firefox for Android: Using a redirect embedded into \<code>sourceMappingUrls\</code> could allow for navigation…](https://agentprime.io/advisories/CVE-2023-29540.md)
  `CVE-2023-29540` · CVE record: Mozilla Firefox for Android and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox: When handling the filename directive in the Content-Disposition header…](https://agentprime.io/advisories/CVE-2023-29539.md)
  `CVE-2023-29539` · CVE record: Mozilla Firefox and 4 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox for Android: Under specific circumstances a WebExtension may have received a \<code>jar:file:///\</code>…](https://agentprime.io/advisories/CVE-2023-29538.md)
  `CVE-2023-29538` · CVE record: Mozilla Firefox for Android and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox for Android: Multiple race conditions in the font initialization could have led to memory corruption…](https://agentprime.io/advisories/CVE-2023-29537.md)
  `CVE-2023-29537` · CVE record: Mozilla Firefox for Android and 2 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox: An attacker could cause the memory manager to incorrectly free a pointer that addresses…](https://agentprime.io/advisories/CVE-2023-29536.md)
  `CVE-2023-29536` · CVE record: Mozilla Firefox and 4 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox: Following a Garbage Collector compaction…](https://agentprime.io/advisories/CVE-2023-29535.md)
  `CVE-2023-29535` · CVE record: Mozilla Firefox and 4 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Mozilla Firefox: A website could have obscured the fullscreen notification by using a combination of…](https://agentprime.io/advisories/CVE-2023-29533.md)
  `CVE-2023-29533` · CVE record: Mozilla Firefox and 4 more · No CVSS score · Not analysed yet · Published 2 Jun 2023
- [Use after free in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2022-26486.md)
  `CVE-2022-26486` · CVE record: Mozilla Firefox and 4 more · CVSS 9.6 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 22 Dec 2022 · Tags: Memory corruption
- [Use after free in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2022-26485.md)
  `CVE-2022-26485` · CVE record: Mozilla Firefox and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.14 · Not analysed yet · Published 22 Dec 2022 · Tags: Memory corruption
- [Prototype pollution in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2022-1802.md)
  `CVE-2022-1802` · CVE record: Mozilla Firefox ESR and 3 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 22 Dec 2022 · Tags: Prototype pollution
- [Prototype pollution in Mozilla Firefox ESR and others](https://agentprime.io/advisories/CVE-2022-1529.md)
  `CVE-2022-1529` · CVE record: Mozilla Firefox ESR and 3 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 22 Dec 2022 · Tags: Prototype pollution
- [Mozilla Firefox: When Web Render components were destructed…](https://agentprime.io/advisories/CVE-2021-29952.md)
  `CVE-2021-29952` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox: A malicious webpage could have forced a Firefox for Android user into executing…](https://agentprime.io/advisories/CVE-2021-29953.md)
  `CVE-2021-29953` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [Mozilla Firefox: When performing EC scalar point multiplication…](https://agentprime.io/advisories/CVE-2020-6829.md)
  `CVE-2020-6829` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 28 Oct 2020
- [Mozilla Firefox: During ECDSA signature generation, padding applied in the nonce designed to ensure…](https://agentprime.io/advisories/CVE-2020-12401.md)
  `CVE-2020-12401` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 8 Oct 2020
- [Mozilla Firefox: When converting coordinates from projective to affine…](https://agentprime.io/advisories/CVE-2020-12400.md)
  `CVE-2020-12400` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 8 Oct 2020
- [Mozilla Firefox: By holding a reference to the eval() function from an about:blank window…](https://agentprime.io/advisories/CVE-2020-15664.md)
  `CVE-2020-15664` · CVE record: Mozilla Firefox and 3 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: When trying to load a non-video in an audio/video context the exact status code (200…](https://agentprime.io/advisories/CVE-2020-15666.md)
  `CVE-2020-15666` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox: A lock was missing when accessing a data structure and importing certificate information…](https://agentprime.io/advisories/CVE-2020-15668.md)
  `CVE-2020-15668` · CVE record: Mozilla Firefox and 1 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla developers reported memory safety bugs present in Firefox for Android 79.](https://agentprime.io/advisories/CVE-2020-15670.md)
  `CVE-2020-15670` · CVE record: Mozilla Firefox and 3 more · No CVSS score · Not analysed yet · Published 1 Oct 2020
- [Mozilla Firefox for Android: When typing in a password under certain conditions…](https://agentprime.io/advisories/CVE-2020-15671.md)
  `CVE-2020-15671` · CVE record: Mozilla Firefox for Android · No CVSS score · Not analysed yet · Published 1 Oct 2020

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mozilla-firefox-for-android>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mozilla-firefox-for-android/>. Everything for agents: <https://agentprime.io/llms.txt>.