CVE-2025-54145
Critical · CVSS 9.1- CVSS
- 9.1
- nvd
- EPSS
- 0.39%
- 31th pct
- KEV
- No
- Class
- other
- CWE-601
Description
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141.
References
Status: profiled · ingested 2026-10-05T18:00:53.000Z