1. Home
  2. CVE Database
  3. CVE-2024-0953
MEDIUM · 6.1

CVE-2024-0953

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them...

Vulnerability Description

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
MozillaFirefox-

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2024-0953?

CVE-2024-0953 is a vulnerability with a CVSS score of 6.1 (MEDIUM). When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them...

How severe is CVE-2024-0953?

CVE-2024-0953 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-0953?

Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox.