PT-2022-15654 · Mozilla+1 · Firefox For Android+1

Wladimir Palant · Published 2022-01-14 · Updated 2024-12-12 · CVE-2022-22749

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 96

Description The issue allows navigation to some URLs that do not point to web content when scanning QR codes. This bug only affects Firefox for Android, with other operating systems being unaffected.

Recommendations For Firefox for Android versions prior to 96, update to version 96 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2022-1053

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

CVE-2022-22749

OPENSUSE-SU-2024:11732-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

References · 1868

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1705094 · Exploit
• https://mozilla.org/security/advisories/mfsa2022-01 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11732-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22749 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22749 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25744 · Note
• https://suse.com/security/cve/CVE-2021-29962 · Note
• https://suse.com/security/cve/CVE-2023-29545 · Note
• https://suse.com/security/cve/CVE-2020-26955 · Note
• https://suse.com/security/cve/CVE-2015-2731 · Note
• https://suse.com/security/cve/CVE-2024-2612 · Note
• https://suse.com/security/cve/CVE-2023-5731 · Note
• https://suse.com/security/cve/CVE-2016-5281 · Note
• https://suse.com/security/cve/CVE-2019-17016 · Note