PT-2025-52225 · Mozilla · Firefox For Ios

Azril · Published 2025-12-15 · Updated 2025-12-18 · CVE-2025-14744

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 144.0

Description A weakness exists in Firefox for iOS where Unicode Right-to-Left Override (RTLO) characters can be used by malicious websites to manipulate filenames displayed in the downloads user interface. This could mislead users into saving files with incorrect file types.

Recommendations Update Firefox for iOS to version 144.0 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2025-16336

CVE-2025-14744

Affected Products

Firefox For Ios

References · 10

• https://cve.org/CVERecord?id=CVE-2025-14744 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14744 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14744 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-97 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14744 · Security Note
• https://bdu.fstec.ru/vul/2025-16336 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-97 · Vendor Advisory
• https://twitter.com/CVEnew/status/2001728064347345191 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=1984683 · Note