CVE-2021-23977 - Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories

Back Back to CVE browser

MEDIUM

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories

Published Feb 26, 2021

5.3

MEDIUM

CVSS 3.1

EPSS 0.88%

Description

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  < 86
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
< 86	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-367

References (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1684761
x_refsource_MISCIssue TrackingPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10898
Advisory
https://security.gentoo.org/glsa/202104-10
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.mozilla.org/security/advisories/mfsa2021-07/
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1684761		x_refsource_MISCIssue TrackingPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10898		Advisory
https://security.gentoo.org/glsa/202104-10		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.mozilla.org/security/advisories/mfsa2021-07/		x_refsource_MISCRelease NotesVendor Advisory