CVE-2024-9395: Medium severity firefox vulnerability

Q: What is the severity of CVE-2024-9395?

CVE-2024-9395 is categorized as a moderate severity vulnerability.

Q: How do I fix CVE-2024-9395?

To fix CVE-2024-9395, update your Firefox for Android to version 131 or later.

Q: Who is affected by CVE-2024-9395?

CVE-2024-9395 affects users of Firefox for Android versions below 131.

Q: What does CVE-2024-9395 exploit?

CVE-2024-9395 exploits the display of filenames with excessive spaces, potentially obscuring file extensions.

Q: Is CVE-2024-9395 affecting other versions of Firefox?

No, CVE-2024-9395 only affects Firefox for Android; other versions of Firefox are not impacted.

Published Oct 1, 2024

Updated

A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 131.

Other sources

A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog.This bug only affects Firefox for Android. Other versions of Firefox are unaffected.

— Mozilla

Affected Software

2 affected componentsFixes available

Mozilla Firefox<131

131

Mozilla Firefox<131.0

Event History

Oct 1, 2024

CVE Published

via Mozilla·12:00 AM

CVE Published

via MITRE·03:13 PM

Data Sourced

via MITRE·03:13 PM

DescriptionWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

MFSA2024-46

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-9395?

CVE-2024-9395 is categorized as a moderate severity vulnerability.

How do I fix CVE-2024-9395?

To fix CVE-2024-9395, update your Firefox for Android to version 131 or later.

Who is affected by CVE-2024-9395?