VULNERABILITY INTELLIGENCE
CVE-2024-0953
CVSS score6.1 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-02-05
Last modified2026-08-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.
Weakness classification
- nvd@nist.gov: CWE-601
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-601
Primary references
- security@mozilla.org — Exploit, Issue Tracking
- security@mozilla.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking