CVE-2022-22758

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 97

Description The issue is related to the handling of USSD codes in tel: links. When a user clicks on such a link, USSD codes specified after a * character are included in the phone number. This could potentially lead to actions being performed on a user's account, similar to a cross-site request forgery attack, on certain phones or with certain carriers.

Recommendations For Firefox for Android versions prior to 97, update to version 97 or later to resolve the issue. As a temporary workaround, consider avoiding clicking on tel: links that may contain USSD codes specified after a * character until the update is applied.