PatchGap
Firefox · Core

CVE-2026-18809

Logic Error in Core
High firefox Logic Error 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionInformation disclosure in Firefox for Android and Firefox Focus for Android
ComponentCore
Bug ClassLogic Error
Tracker2055683
Fix commitb6b18b911126 (firefox) +5/-0
CISA KEVNot listed
CreditedThe Mozilla Fuzzing Team
Disclosed2026-08-04

Files Changed

  • mobile/android/components/geckoview/GeckoViewContentChannelParent.cpp

Patch

view commit
diff --git a/mobile/android/components/geckoview/GeckoViewContentChannelParent.cpp b/mobile/android/components/geckoview/GeckoViewContentChannelParent.cpp
index 01d3225f2bc..b6a30d4f3c2 100644
--- a/mobile/android/components/geckoview/GeckoViewContentChannelParent.cpp
+++ b/mobile/android/components/geckoview/GeckoViewContentChannelParent.cpp
@@ -159,6 +159,11 @@ bool GeckoViewContentChannelParent::Init(
 
   nsCOMPtr<nsIURI> uri = ipc::DeserializeURI(aArgs.uri());
 
+  if (!uri || !uri->SchemeIs("content")) {
+    rv = NS_ERROR_UNKNOWN_PROTOCOL;
+    return false;
+  }
+
   nsAutoCString remoteType;
   rv = GetRemoteType(remoteType);
   if (MOZ_UNLIKELY(NS_FAILED(rv))) {
Loading diff…
On This Page