PatchGap
Firefox · Core

CVE-2025-8364

Logic Error in Core
Low firefox Logic Error

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactlow
DescriptionA crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.<br>*Note: This issue only affected Android operating systems. Other operating systems are unaffected.*
ComponentCore
Bug ClassLogic Error
Tracker1909609
CISA KEVNot listed
CreditedRifa'i Rejal Maynando and Ameen Basha M K
Disclosed2025-07-22

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page