PT-2023-22306 · Mozilla+1 · Firefox For Android+2

Irwan · Published 2023-04-15 · Updated 2024-12-12 · CVE-2023-29546

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description The issue occurs when recording the screen while in Private Browsing on Firefox for Android, where the address bar and keyboard are not hidden, potentially leaking sensitive information. This bug only affects Firefox for Android, and other operating systems are unaffected.

Recommendations For Firefox for Android versions prior to 112, update to version 112 or later to resolve the issue. For Focus for Android versions prior to 112, update to version 112 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2023-1621

ALT-PU-2023-1817

ALT-PU-2023-5202

CVE-2023-29546

OPENSUSE-SU-2024:12882-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

Focus For Android

References · 1942

• https://bdu.fstec.ru/vul/2023-05893 · Security Note
• https://bdu.fstec.ru/vul/2023-01805 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25750 · Security Note
• https://bdu.fstec.ru/vul/2023-02689 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29531 · Security Note
• https://bdu.fstec.ru/vul/2023-05888 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29538 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28160 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-29546 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29549 · Security Note
• https://bdu.fstec.ru/vul/2023-05891 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25748 · Security Note
• https://bdu.fstec.ru/vul/2023-01452 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539 · Security Note