| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 126.0 | 126.0 |
Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free