Skip to content
CVE PROGRAM SOURCE RECORD3.9 Low

CVE-2025-1939

Tapjacking in Android Custom Tabs using transition animations

Description

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 136 to ≤ *unaffected

References