PT-2025-33876 · Mozilla · Focus For Ios+1

Hafiizh · Published 2025-08-19 · Updated 2025-08-20 · CVE-2025-55031

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142 Focus for iOS versions prior to 142

Description: Malicious pages could exploit Firefox for iOS to pass FIDO links to the operating system, triggering the hybrid passkey transport. An attacker within Bluetooth range could potentially trick a user into using their passkey to log the attacker’s computer into the target account.

Recommendations: Update Firefox for iOS to version 142 or later. Update Focus for iOS to version 142 or later.

Fix

Open Redirect

Information Disclosure

Weakness Enumeration

CWE-601

CWE-200

Related Identifiers

BDU:2025-10483

CVE-2025-55031

Affected Products

Firefox For Ios

Focus For Ios

References · 11

• https://bdu.fstec.ru/vul/2025-10483 · Security Note
• https://mozilla.org/security/advisories/mfsa2025-68 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-69 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55031 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-68 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1979804 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1979499 · Note
• https://t.me/CVEtracker/30397 · Telegram Post
• https://twitter.com/CVEnew/status/1957914210974716341 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1958046111916077326 · Twitter Post