Spoofing Vulnerability in Firefox for Android Devices
CVE-2025-8364

4.3MEDIUM

Key Information:

Vendor

Mozilla
Status
Firefox
Vendor
CVE Published:
19 August 2025

What is CVE-2025-8364?

A vulnerability exists in Firefox versions prior to 141 on Android operating systems that allows attackers to exploit crafted URLs using blob: URIs. This flaw can obscure the actual origin of a webpage, leading to spoofing attacks. Users of affected versions may unknowingly interact with misleading content, potentially compromising their security and personal information. It is crucial for users to stay informed about updates and patches to protect their devices against this risk.

Affected Version(s)

Firefox < 141

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1909609
https://bugzilla.mozilla.org/show_bug.cgi?id=1969937
https://www.mozilla.org/security/advisories/mfsa2025-56/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rifa'i Rejal Maynando and Ameen Basha M K
.
CVE-2025-8364 : Spoofing Vulnerability in Firefox for Android Devices