CVE-2025-54145

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141.

Score

CVSS 3.1 9.1 Critical

Status

Modified - security@mozilla.org

Published

2025-08-19

Last modified

2026-10-05

Weaknesses

CWE-601

Affected products

• Firefox (Mozilla)
• Firefox For Ios (Mozilla)

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1946122
• https://www.mozilla.org/security/advisories/mfsa2025-60/