CVE-2025-4086

April 29, 2025 invoker category_cve

Vulnerability Details

Basic Information

Title	CVE-2025-4086
Type	cve
Published	2025-04-29T14:15:35
Last Seen	2025-04-29T16:48:28
CVSS Score	6.5 (MEDIUM)

CVSS v3 Details

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	LOW
Integrity Impact	LOW
Availability Impact	NONE

CVE Information

CVE IDs	CVE-2025-4086
CWE	CWE-451
Bulletin Family	cve

Description

A specially crafted filename containing a large number of encoded newline characters could obscure the file’s extension when displayed in the download dialog.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 138 and Thunderbird < 138.

Impact Assessment

Base Score	6.5
Severity	MEDIUM

View full CVE details