PT-2025-31712

CVE-2025-54143

·

Published

2025-07-22

·

Updated

2026-09-30

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 141
Description: Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page.
Recommendations: Update Firefox for iOS to version 141 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-693: Protection Mechanism Failure
Related identifiers
CVE-2025-54143
BDU:2025-10499
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com