← Retour aux CVEs

CVE-2025-55031

CRITICAL

9.8

Description

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed in Firefox for iOS 142 and Focus for iOS 142.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/19/2025

Derniere modification4/13/2026

Sourcenvd

Observations honeypot0

Produits affectes

mozilla:firefoxmozilla:firefox_focus

Faiblesses (CWE)

CWE-601

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1979499(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1979804(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2025-68/(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2025-69/(security@mozilla.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.