Specially crafted filename could be used to obscure download type
Published Apr 29, 2025
6.5
MEDIUMCVSS 3.1
EPSS 0.29%
Description
A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Affected products
No data.
- < 138.0
- < 138.0
No data.
Red Hat Enterprise Linux 10
firefox
Not affected
Red Hat Enterprise Linux 10
firefox-flatpak-container
Not affected
Red Hat Enterprise Linux 10
thunderbird
Not affected
Red Hat Enterprise Linux 10
thunderbird-flatpak-container
Not affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
Red Hat Enterprise Linux 9
firefox
Not affected
Red Hat Enterprise Linux 9
firefox-flatpak-container
Not affected
Red Hat Enterprise Linux 9
thunderbird
Not affected
Red Hat Enterprise Linux 9
thunderbird-flatpak-container
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 10 | firefox-flatpak-container | Not affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird-flatpak-container | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 9 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 9 | firefox-flatpak-container | Not affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird-flatpak-container | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (7)
- https://access.redhat.com/security/cve/CVE-2025-4086 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1945705 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2362914 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2025-4086
- https://www.cve.org/CVERecord?id=CVE-2025-4086
- https://www.mozilla.org/security/advisories/mfsa2025-28/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-31/ Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-4086 | Vendor Advisory | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1945705 | Permissions Required | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2362914 | Issue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2025-4086 | ||
| https://www.cve.org/CVERecord?id=CVE-2025-4086 | ||
| https://www.mozilla.org/security/advisories/mfsa2025-28/ | Vendor Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2025-31/ | Vendor Advisory |
Change history (0)
No recorded changes yet.