Information disclosure in Firefox for iOS - CVE-2024-38312
Published: June 14, 2024
Vulnerability identifier: #VU92105
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-38312
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. When browsing private tabs, some data related to location history or
webpage thumbnails could be persisted incorrectly within the sandboxed
app bundle after app termination. A local user can gain access to potentially sensitive information.
Affected software
Firefox for iOS
How to mitigate CVE-2024-38312
Install updates from vendor's website.
Firefox for iOS - update to 127.0