CVE-2019-9798
published 2019-04-26CVE-2019-9798: On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party…
PriorityP337high7.4CVSS 3.0
AVNACHPRNUINSUCHIHAN
EPSS
0.91%
56.5th percentile
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle attack if a malicious code was written to that location and loaded. *Note: This issue only affects Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 66.0 | 66.0 |
| mozilla | firefox | >= unspecified < 66 | 66 |
CVSS provenance
nvdv3.07.4HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv7.4HIGH
vendor_debian7.4LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2019-9798: firefox - On Android systems, Firefox can load a library from APITRACE_LIB, which is writa...
vendor_debian·2019·CVSS 7.4
CVE-2019-9798 [HIGH] CVE-2019-9798: firefox - On Android systems, Firefox can load a library from APITRACE_LIB, which is writa...
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle attack if a malicious code was written to that location and loaded. *Note: This issue only affects Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
Scope: local
sid: resolved
GHSA
GHSA-6c53-pfqv-mx96: On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications
ghsa_unreviewed·2022-05-24
CVE-2019-9798 [HIGH] GHSA-6c53-pfqv-mx96: On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle attack if a malicious code was written to that location and loaded. *Note: This issue only affects Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
OSV
CVE-2019-9798: On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications
osv·2019-04-26·CVSS 7.4
CVE-2019-9798 [HIGH] CVE-2019-9798: On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications
On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle attack if a malicious code was written to that location and loaded. *Note: This issue only affects Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 66.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-26
Published