Back to feed
EUVD-2024-44361 · Published May 14, 2024
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.
Technologies
Mozilla Firefox
Weaknesses
CWE-327
CVSS scores
- v3.18.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Stealth Defense Impairment
References
Potentially impacted assets
See if this affects your attack surface
