CVE-2025-11717: The password edit screen was not hidden in Android card view
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 144 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0-1 - Upgrade
Upgrade
Firefox for Androidto a version that resolves this vulnerability.Fixed in 144
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-11717?
CVE-2025-11717 is a moderate severity vulnerability affecting Firefox versions prior to 144.
How do I fix CVE-2025-11717?
To fix CVE-2025-11717, update Firefox to version 144 or later.
What are the implications of CVE-2025-11717 for users?
CVE-2025-11717 may result in a black screen when switching apps, especially if the last screen viewed was related to passwords.
Is CVE-2025-11717 easily exploitable?
CVE-2025-11717 does not present a direct exploitability vector but can affect user visibility of password information.
What platforms are affected by CVE-2025-11717?
CVE-2025-11717 affects the Android version of Mozilla Firefox.