PT-2022-24422 · Mozilla+1 · Firefox For Android+1

Agi Sferro · Published 2022-08-23 · Updated 2024-12-12 · CVE-2022-38474

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 104

Description A bug allows a website with microphone access permission to record audio without displaying the audio notification, affecting only Firefox for Android. The issue does not bypass the initial permission prompt but rather the notification shown after permission has been granted.

Recommendations For Firefox for Android versions prior to 104, update to version 104 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

ALT-PU-2022-2481

ALT-PU-2022-2930

ALT-PU-2023-1139

ALT-PU-2023-4339

CVE-2022-38474

OPENSUSE-SU-2024:12286-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

References · 1868

• https://nvd.nist.gov/vuln/detail/CVE-2022-38474 · Security Note
• https://mozilla.org/security/advisories/mfsa2022-33 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12286-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38474 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1719511 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25744 · Note
• https://suse.com/security/cve/CVE-2021-29962 · Note
• https://suse.com/security/cve/CVE-2023-29545 · Note
• https://suse.com/security/cve/CVE-2020-26955 · Note
• https://suse.com/security/cve/CVE-2015-2731 · Note
• https://suse.com/security/cve/CVE-2024-2612 · Note
• https://suse.com/security/cve/CVE-2023-5731 · Note
• https://suse.com/security/cve/CVE-2016-5281 · Note
• https://suse.com/security/cve/CVE-2019-17016 · Note