CVE-2024-0953: QR Code Scanner does not prompt before navigating user

Published Feb 5, 2024

Updated

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content.

Affected Software

3 affected components

Mozilla Firefox Iphone Os

All of the following

Mozilla Firefox=129

Apple iOS

Event History

Feb 5, 2024

CVE Published

via MITRE·04:48 PM

Data Sourced

via MITRE·04:48 PM

DescriptionWeakness

Aug 5, 2024

Data Sourced

via Mozilla·12:00 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

MFSA2024-36

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-0953?

CVE-2024-0953 has been classified as a moderate severity vulnerability due to its potential to direct users to unwanted content without prompt.

How do I fix CVE-2024-0953?

To mitigate CVE-2024-0953, users should update Mozilla Firefox to the latest version where this issue has been addressed.

Which versions of Firefox are affected by CVE-2024-0953?

CVE-2024-0953 affects Mozilla Firefox version 129 running on iOS.

What impact does CVE-2024-0953 have on users?

CVE-2024-0953 can lead to user confusion and potentially expose them to unwanted or malicious content when scanning QR Codes.

Is there a workaround for CVE-2024-0953?

Currently, the recommended workaround for CVE-2024-0953 is to avoid using the QR Code Scanner feature until a fix is applied.