CVE-2024-0953: QR Code Scanner does not prompt before navigating user

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1837916
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-36/
• https://www.mozilla.org/security/advisories/mfsa2024-36/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2024-36

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-43112
• CVE-2024-43113
• CVE-2024-0953
• CVE-2024-43111

Frequently Asked Questions

• What is the severity of CVE-2024-0953?

  CVE-2024-0953 has been classified as a moderate severity vulnerability due to its potential to direct users to unwanted content without prompt.

• How do I fix CVE-2024-0953?

  To mitigate CVE-2024-0953, users should update Mozilla Firefox to the latest version where this issue has been addressed.

• Which versions of Firefox are affected by CVE-2024-0953?

  CVE-2024-0953 affects Mozilla Firefox version 129 running on iOS.

• What impact does CVE-2024-0953 have on users?

  CVE-2024-0953 can lead to user confusion and potentially expose them to unwanted or malicious content when scanning QR Codes.

• Is there a workaround for CVE-2024-0953?

  Currently, the recommended workaround for CVE-2024-0953 is to avoid using the QR Code Scanner feature until a fix is applied.