Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:53.126091
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:53.126092
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:53.126094
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:53.126095

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3845 vulnerable 2026-06-08 08:01:19.557792 Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android
Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2.
Published: 2026-03-10T15:03:48.867Z
Updated: 2026-04-13T13:53:59.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7523 vulnerable 2026-06-08 06:58:22.374749 Details available
A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* This vulnerability affects Firefox < 129.
Published: 2024-08-06T12:38:15.776Z
Updated: 2025-03-14T15:16:08.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6605 vulnerable 2026-06-08 06:58:20.010431 Firefox Android missed activation delay to prevent tapjacking
Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.
Published: 2024-07-09T14:25:57.930Z
Updated: 2025-10-30T16:16:23.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11703 vulnerable 2026-06-08 06:23:50.257913 Details available
On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133.
Published: 2024-11-26T13:33:58.796Z
Updated: 2024-12-04T14:19:10.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5217 vulnerable 2026-06-08 06:19:42.902234 Details available
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published: 2023-09-28T15:23:18.340Z
Updated: 2025-10-21T23:05:36.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29551 vulnerable 2026-06-08 06:02:40.488740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29550 vulnerable 2026-06-08 06:02:40.488188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29549 vulnerable 2026-06-08 06:02:40.487387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29548 vulnerable 2026-06-08 06:02:40.486725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29546 vulnerable 2026-06-08 06:02:40.485129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29544 vulnerable 2026-06-08 06:02:40.483861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29543 vulnerable 2026-06-08 06:02:40.483210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29541 vulnerable 2026-06-08 06:02:40.481599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29540 vulnerable 2026-06-08 06:02:40.480712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29539 vulnerable 2026-06-08 06:02:40.480203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29538 vulnerable 2026-06-08 06:02:40.479290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29537 vulnerable 2026-06-08 06:02:40.478556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29536 vulnerable 2026-06-08 06:02:40.477801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29535 vulnerable 2026-06-08 06:02:40.476882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29534 vulnerable 2026-06-08 06:02:40.474585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29533 vulnerable 2026-06-08 06:02:40.472968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28159 vulnerable 2026-06-08 06:01:09.757409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25749 vulnerable 2026-06-08 05:56:09.759898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25748 vulnerable 2026-06-08 05:56:09.759328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25747 vulnerable 2026-06-08 05:56:09.758878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23600 vulnerable 2026-06-08 05:56:03.754515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38474 vulnerable 2026-06-08 05:47:16.533967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26486 vulnerable 2026-06-08 05:41:52.254392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26485 vulnerable 2026-06-08 05:41:52.252136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29993 vulnerable 2026-06-08 05:31:27.293824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29973 vulnerable 2026-06-08 05:31:27.278636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29971 vulnerable 2026-06-08 05:31:27.278047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29965 vulnerable 2026-06-08 05:31:27.275736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29963 vulnerable 2026-06-08 05:31:27.274989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29962 vulnerable 2026-06-08 05:31:27.274568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29953 vulnerable 2026-06-08 05:31:27.267394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29952 vulnerable 2026-06-08 05:31:27.266901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23977 vulnerable 2026-06-08 05:30:03.425306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23976 vulnerable 2026-06-08 05:30:03.425004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23959 vulnerable 2026-06-08 05:30:03.419018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23957 vulnerable 2026-06-08 05:30:03.418318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6829 vulnerable 2026-06-08 05:26:45.727049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26977 vulnerable 2026-06-08 05:23:52.012572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26975 vulnerable 2026-06-08 05:23:52.011661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26964 vulnerable 2026-06-08 05:23:52.003076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26957 vulnerable 2026-06-08 05:23:51.999930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26955 vulnerable 2026-06-08 05:23:51.998916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26954 vulnerable 2026-06-08 05:23:51.998302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15671 vulnerable 2026-06-08 05:19:26.313423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15670 vulnerable 2026-06-08 05:19:26.313069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15668 vulnerable 2026-06-08 05:19:26.312231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15666 vulnerable 2026-06-08 05:19:26.311148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12401 vulnerable 2026-06-08 05:17:58.131734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12400 vulnerable 2026-06-08 05:17:58.131265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.