PT-2025-26728 · Mozilla+2 · Firefox For Android+2

Umar Farooq · Published 2025-06-24 · Updated 2025-11-19 · CVE-2025-6431

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Firefox for Android versions prior to 140

Description: The issue allows an attacker to bypass the default prompt that appears when a link can be opened in an external application, potentially exposing the user to security risks or privacy leaks in external applications.

Recommendations: For Firefox for Android versions prior to 140, update to version 140 or later to resolve the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-11497

ALT-PU-2025-14599

ALT-PU-2025-8725

BDU:2025-08994

CVE-2025-6431

OPENSUSE-SU-2025:15325-1

OPENSUSE-SU-2025:15371-1

SUSE-SU-2025:02339-1

SUSE-SU-2025:02529-1

SUSE-SU-2025_02339-1

SUSE-SU-2025_02529-1

Affected Products

Alt Linux

Firefox For Android

Suse

References · 48

• https://ubuntu.com/security/CVE-2025-6431 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-51 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-6431 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-6431 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02339-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02529-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6431 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-51/#CVE-2025-6431 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15325-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6431 · Security Note
• https://bdu.fstec.ru/vul/2025-08994 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15371-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-8037 · Note
• https://suse.com/security/cve/CVE-2025-8039 · Note
• https://suse.com/security/cve/CVE-2025-8035 · Note