Mozilla Firefox Tapjacking Vulnerability in Android Custom Tabs

A tapjacking vulnerability has been identified in Mozilla Firefox for Android, prior to version 136. This issue arises within the Custom Tabs feature, which allows Android apps to load web pages. The vulnerability exploits the transition animation of Custom Tabs, potentially misleading users into granting sensitive permissions by obscuring what they were actually interacting with.

Impact

Exploitation of this vulnerability could lead to unauthorized permission grants, allowing apps to access sensitive user data or features.

Remediation

Users can update to Firefox version 136 or later to address this vulnerability.