CVE-2024-9395

firefox: Specially crafted filename could be used to obscure download type

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · October 2, 2024

Updated · November 21, 2025

Description

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in the download dialog.

Statement

This bug only affects Firefox Focus for Android. Firefox versions shipped by Red Hat are unaffected.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified