Mozilla Firefox for iOS Open-Text URL Scheme Vulnerability via QR Code Scanner

A vulnerability exists in Firefox for iOS versions prior to 141, where the QR code scanner could be exploited to open arbitrary websites. This issue arises from the open-text URL scheme used by Firefox, which could be leveraged to redirect users to malicious links if they were tricked into scanning a QR code containing such a link.

Impact

Exploitation of this vulnerability could lead to users being redirected to arbitrary websites, potentially including malicious sites.

Remediation

Users can update to Firefox for iOS version 141 or later to address this vulnerability.