PT-2022-24422

CVE-2022-38474

Published

2022-08-23

Updated

2024-12-12

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 104

Description A bug allows a website with microphone access permission to record audio without displaying the audio notification, affecting only Firefox for Android. The issue does not bypass the initial permission prompt but rather the notification shown after permission has been granted.

Recommendations For Firefox for Android versions prior to 104, update to version 104 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Agi Sferro

Vendors

Affected products

Weakness enumeration

CWE-668: Exposure of Resource to Wrong Sphere

Related identifiers

CVE-2022-38474